Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows...

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.