4.3
CVSSv2

CVE-2008-1888

Published: 18/04/2008 Updated: 11/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote malicious users to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft sharepoint server 2.0

Exploits

source: wwwsecurityfocuscom/bid/28706/info Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data Note that to perform attacks, an attacker requires access to a user account with sufficient privileges to edit pages Exploiting this issue may allow the at ...