CVE-2014-4075

Cross-site scripting XSS vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller MVC 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka "MVC XSS Vulnerability."...

CVE-2014-4075: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller MVC 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka "MVC XSS Vulnerability."...

PT-2014-2054

Name of the Vulnerable Software and Affected Versions Microsoft ASP.NET Model View Controller MVC versions 2.0 through 5.1 Description The issue is related to a cross-site scripting XSS vulnerability in the System.Web.Mvc.dll library of the ASP.NET Model View Controller MVC framework. This...