• info
• discussion
• exploit
• solution
• references

Microsoft Outlook Web Access HTML Attachment Script Execution Vulnerability

A proof of concept exploit is available:

• /data/vulnerabilities/exploits/OWA_XSS.txt