CVE

Id
32005  
CVE No.
CVE-2008-1888  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.  
Phase
Assigned (20080418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345262 32005 CVE-2008-1888 BUGTRAQ:20080409 CAU-2008-0002: Microsoft Windows SharePoint Services PictureSource XSS  View
345263 32005 CVE-2008-1888 URL:http://www.securityfocus.com/archive/1/archive/1/490624/100/0/threaded  View
345264 32005 CVE-2008-1888 MISC:http://www.caughq.org/advisories/CAU-2008-0002.txt  View
345265 32005 CVE-2008-1888 BID:28706  View
345266 32005 CVE-2008-1888 URL:http://www.securityfocus.com/bid/28706  View
345267 32005 CVE-2008-1888 XF:microsoft-sharepoint-picturesource-xss(41934)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47656 JVNDB-2008-002966 Blogator-script の bs_auth.php におけるクロスサイトスクリプティングの脆弱性 Blogator-script の bs_auth.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1892 32005 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002966.html  View