Microsoft Visual Studio Team Foundation Server跨站脚本执行漏洞（MS12-061)

BUGTRAQ ID: 55409 CVE ID: CVE-2012-1892 Microsoft Visual Studio Team Foundation Server是微软应用生命周期管理解决方案的核心协作平台，可实现软件递送流程自动化，包括有效管理软件开发项目的工具。 Microsoft Visual Studio Team Foundation Server存在反射XSS漏洞,可允许攻击者注入客户端脚本到IE的用户实例中或所有通过Team Foundation Server Web访问的Web浏览器中。该脚本可欺骗内容、泄露信息、以目标用户权限执行任意操作。 0 Microso...

CVE-2012-1892: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."...

PT-2012-3630

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio Team Foundation Server 2010 SP1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. This could potentially lead to unauthorized actio...

Microsoft Visual Studio Team Foundation Server 2013 MSI - Language Neutral

This includes the following MSIs: Microsoft Team Foundation Server 2013 x64 - E42CB2FF-C11E-3463-AAEF-1A78FDCEE360, Microsoft Team Foundation Server 2013 x86 - ECF3ACAB-F506-3A8E-A400-62B2464FDE8A...