NVD

Id
4813  
Name
CVE-2008-5026  
Description
Microsoft SharePoint uses URLs with the same hostname and port number for a web site"s primary files and individual users" uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML documents.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-11-10  
Modified Date
2010-03-01  
Seq
2008-5026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30280 4813 CVE-2008-5026 20081106 Re: [WEB SECURITY] countermeasure against attacks through HTML shared files  View
30281 4813 CVE-2008-5026 20081106 countermeasure against attacks through HTML shared files  View
30282 4813 CVE-2008-5026 20081106 Re: [WEB SECURITY] countermeasure against attacks through HTML shared files  View
30283 4813 CVE-2008-5026 http://www.pomcor.com/whitepapers/file_sharing_security.pdf  View
30284 4813 CVE-2008-5026 sharepoint-htmldocument-xss(46590)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49732 JVNDB-2008-005042 Microsoft SharePoint におけるクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性 Microsoft SharePoint は、Web サイトのプライマリファイルおよび個々のユーザーのアップロードしたファイルについて同一のホスト名およびポート番号を持つ URL を使用するため、同一の生成元の関係を活用される、およびクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性が存在します。 CVE-2008-5026 35139 CVE-2008-5026 4813 3.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005042.html 2008-11-10 2012-09-25 View