Cross site scripting

🗓️ 12 Jun 2012 22:55:00Reported by PRIOn knowledge baseType

The toStaticHTML API in Microsoft IE 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee is vulnerable to XSS attack

Reporter	Title	Published	Views	Family All 28
0day.today	IE9 / SharePoint / Lync toStaticHTML HTML Sanitizing Bypass	11 Jul 201200:00	–	zdt
Circl	CVE-2012-1858	12 Jul 201200:00	–	circl
Check Point Advisories	Internet Explorer HTML Sanitization Information Disclosure (MS12-039; CVE-2012-1858)	12 Jun 201200:00	–	checkpoint_advisories
Check Point Advisories	Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)	10 Jul 201200:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)	18 May 201500:00	–	checkpoint_advisories
CVE	CVE-2012-1858	12 Jun 201222:00	–	cve
Cvelist	CVE-2012-1858	12 Jun 201222:00	–	cvelist
Exploit DB	Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)	12 Jul 201200:00	–	exploitdb
exploitpack	Microsoft Internet Explorer 9 SharePoint Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037MS12-039MS12-050)	12 Jul 201200:00	–	exploitpack
Microsoft KB	MS12-050: Vulnerabilities in SharePoint could allow elevation of privilege: July 10, 2012	10 Jul 201200:00	–	mskb

Source	Link
us-cert	www.us-cert.gov/cas/techalerts/TA12-164A.html
us-cert	www.us-cert.gov/cas/techalerts/TA12-192A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15530
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037

07 Dec 2023 18:38Current

5.6Medium risk

Vulners AI Score5.6

EPSS0.3827