Microsoft Anti-XSS Library Bypass (MS12-007)

Introduction ------------- Microsoft Anti-XSS Library is used to protect applications from Cross-Site Scripting attacks, by providing methods for input sanitization. Vulnerability ------------- Microsoft Anti-XSS Library 3.0 and 4.0 are vulnerable to an attack in which an attacker is able to crea...

MS12-007: Vulnerability in AntiXSS Library Could Allow Information Disclosure (2607664)

The remote Windows host is running a version of the Anti-Cross-Site Scripting Library AntiXSS that is affected by an information disclosure vulnerability. An attacker could gain access to sensitive information if he could pass a malicious script to a website using the sanitization function of the...