Exploit Microsoft SharePoint Server 2.0 - Picture Source HTML Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
31632
Проверка EDB
  1. Пройдено
Автор
ONEIDBEAGL3
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2008-1888
Дата публикации
2008-04-09
Код:
source: https://www.securityfocus.com/bid/28706/info

Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacker requires access to a user account with sufficient privileges to edit pages.

Exploiting this issue may allow the attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Microsoft SharePoint Server 2.0 is vulnerable; other versions may also be affected.

"""></P></div></td><script>[your javascript here]</script>
 
Источник
www.exploit-db.com

Похожие темы