Microsoft SharePoint Server 2.0 - Picture Source HTML Injection

Author: OneIdBeagl3
type: remote
platform: windows
port: 
date_added: 2008-04-09 
date_updated: 2014-02-13 
verified: 1 
codes: CVE-2008-1888;OSVDB-44459 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/28706/info

Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacker requires access to a user account with sufficient privileges to edit pages.

Exploiting this issue may allow the attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Microsoft SharePoint Server 2.0 is vulnerable; other versions may also be affected.

"""></P></div></td><script>[your javascript here]</script>