← back
CVE-2011-1976

CVE-2011-1976

EPSS 20.8%
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/36020unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=145326307707460&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773http://www.securityfocus.com/bid/49033http://www.us-cert.gov/cas/techalerts/TA11-221A.html