CVE-2008-1888: XSS

Published Apr 18, 2008

Updated

Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.

Affected Software

1 affected component

Microsoft SharePoint Server=2.0

Event History

Apr 18, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1888?

The severity of CVE-2008-1888 is considered medium due to the potential for injection of arbitrary web scripts.

How do I fix CVE-2008-1888?

To fix CVE-2008-1888, apply the appropriate security updates or patches provided by Microsoft for SharePoint Services.

What is the impact of CVE-2008-1888?

The impact of CVE-2008-1888 allows remote attackers to execute arbitrary HTML or script code in the context of an affected user's browser.

Who is affected by CVE-2008-1888?

CVE-2008-1888 affects users of Microsoft Windows SharePoint Services version 2.0.

Can CVE-2008-1888 be exploited remotely?

Yes, CVE-2008-1888 can be exploited remotely by attackers to inject malicious content.