medium4.3Public exploit code
CVE-2008-5551
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting da…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 8 - CSS 'expression' Property Cross-Site Scripting Filter Bypass2008-12-11 · remote · windows · Verified
Impact
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4724
- http://www.securityfocus.com/archive/1/499124/100/0/threaded
- http://www.securityfocus.com/bid/32780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47277
- http://securityreason.com/securityalert/4724
- http://www.securityfocus.com/archive/1/499124/100/0/threaded
- http://www.securityfocus.com/bid/32780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47277