Vulnerability Details CVE-2008-1888
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.25
EPSS Ranking 96.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.caughq.org/advisories/CAU-2008-0002.txt
- http://www.securityfocus.com/archive/1/490624/100/0/threaded
- http://www.securityfocus.com/bid/28706
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41934
- http://www.caughq.org/advisories/CAU-2008-0002.txt
- http://www.securityfocus.com/archive/1/490624/100/0/threaded
- http://www.securityfocus.com/bid/28706
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41934
Products affected by CVE-2008-1888
-
cpe:2.3:a:microsoft:sharepoint_server:2.0