CVE-2008-5556
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-5556
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Internet Explorer 8.0绕过XSS保护机制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Internet Explorer是微软Windows操作系统中默认捆绑的WEB浏览器。 ** 有争议的 ** Microsoft Internet Explorer 8.0 Beta 2版本的XSS过滤器没有检验出设计来对utf-7中内嵌的网页执行反操作的攻击模式，这会允许远程攻击者通过注入特制的utf-7内容，以绕过XSS保护机制和执行XSS攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-5556
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-5556
请登录查看更多情报信息。
Same Patch Batch · n/a · 2008-12-12 · 49 CVEs total
| CVE-2008-5554 | Microsoft Internet Explorer XSS过滤机制绕过漏洞 | |
| CVE-2008-5487 | TurnkeyForms Text Link Sales admin.php跨站脚本漏洞 | |
| CVE-2008-5489 | ClipShare Pro 'channel_detail.php' SQL注入漏洞 | |
| CVE-2008-5493 | Wholesale 'track.php' SQL注入漏洞 | |
| CVE-2008-5494 | Joomla! Contact Information模块index.php SQL注入漏洞 | |
| CVE-2008-5495 | GungHo LoadPrgAx ActiveX Control 未明漏洞 | |
| CVE-2008-5496 | PozScripts Business Directory 'showcategory.php' SQL注入漏洞 | |
| CVE-2008-5497 | BandSite CMS Cookie 绕过认证和权限提升漏洞 | |
| CVE-2008-5492 | VeryDOC PDFView ActiveX组件堆溢出漏洞 | |
| CVE-2008-5555 | Microsoft Internet Explorer XSS过滤机制绕过漏洞 | |
| CVE-2008-5486 | TurnkeyForms Text Link Sales admin.php SQL注入漏洞 | |
| CVE-2008-5553 | Microsoft Internet Explorer XSS过滤机制绕过漏洞 | |
| CVE-2008-5552 | Microsoft Internet Explorer XSS过滤机制绕过漏洞 | |
| CVE-2008-5551 | Microsoft Internet Explorer XSS过滤器双重注入漏洞 | |
| CVE-2008-5550 | Sun Java Web Console console/faces/jsp/login/BeginLogin.jsp URL重定向漏洞 | |
| CVE-2008-5549 | Sun Java System Portal Server Web Console 信息泄露漏洞 | |
| CVE-2008-5548 | VirusBuster MZ头信息文件绕过扫描漏洞 | |
| CVE-2008-5547 | HAURI ViRobot MZ头信息文件绕过扫描漏洞 | |
| CVE-2008-5546 | VirusBlokAda VBA32 MZ头信息文件绕过扫描漏洞 | |
| CVE-2008-5545 | Trend Micro AntiVirus MZ头信息文件绕过扫描漏洞 |
Showing top 20 of 49 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-5556
No comments yet