CVE-2008-5026

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments)…

published November 10, 2008

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML documents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09385 · 95.4th percentile
Published
2008-11-10T15:00Z
EPSS history
Timeline
  • 10 NOV 15:00Z
    Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments)…
    cvelistv5