CVE-2011-1976 Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via....
MediumCVSS 4.3
EPSS 20.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft report viewer | = 2005-sp1 | No fix listed |
| Microsoft visual studio | = 2005-sp1 | No fix listed |
References
- HPSBGN03534 third-party-advisory vendor-advisory
- 49033 vdb-entry
- TA11-221A third-party-advisory us-government-resource
- MS11-067 vendor-advisory
- h20566.www2.hpe.com third-party-advisory
- oval:org.mitre.oval:def:12773 signature vdb-entry