vendor:
Internet Explorer
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting Filter Bypass
79
CWE
Product Name: Internet Explorer
Affected Version From: Internet Explorer 8 beta 2
Affected Version To: Internet Explorer 8 beta 2
Patch Exists: YES
Related CWE: N/A
CPE: a:microsoft:internet_explorer
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008
Microsoft Internet Explorer Cross-Site Scripting Filter Bypass Vulnerability
Microsoft Internet Explorer 8 includes a cross-site-scripting filter that is designed to prevent cross-site-scripting attacks against vulnerable web applications. Attackers may be able to bypass this filter under certain conditions, such as by taking advantage of an existing vulnerability in a web application. Internet Explorer 8 beta 2 is vulnerable.
Mitigation:
Ensure that web applications are not vulnerable to cross-site scripting attacks.