Description
ASP.NET中存在跨站脚本漏洞。该漏洞是由于ASP.NET MVC对用户输入进行的编码方式验证不足导致的。
Microsoft ASP.NET MVC CVE-2014-4075 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2014-4075
https://learn.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-059
https://www.nsfocus.net/vulndb/28047
https://www.tenablecloud.cn/plugins/nessus/78434
https://cve.imfht.com/detail/CVE-2014-4075
https://www.securityfocus.com/bid/70352
https://www.cvedetails.com/microsoft-bulletin/MS14-059/
https://vuldb.com/vuln/67828
https://security.snyk.io/vuln/SNYK-DOTNET-MICROSOFTASPNETMVC-60000
https://advisories.checkpoint.com/defense/advisories/public/2014/cpai-2014-1880.html/
https://www.beyondtrust.com/blog/entry/exploiting-ms14-059-because-sometimes-xss-is-fun-sometimes
https://www.tenable.com/cve/CVE-2014-4075
https://www.invicti.com/web-application-vulnerabilities/asp-net-mvc-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-cve-2014-4075