Security Advisory

CVE-2008-5026

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-11-10 15:00:00

Last updated 2024-08-07 10:40:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML documents.

← Browse all CVEs View on cve.org ↗