CVE-2011-1976

Microsoft Visual Studio 2005 SP1-Report Viewer 2005 SP1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED

by Adam Bixby · textremotewindows

https://www.exploit-db.com/exploits/36020

View Code ZIP pw:eip

References (6)

[Third Party Advisory] http://marc.info/?l=bugtraq&m=145326307707460&w=2

[Third Party Advisory, US Government Resource] http://www.us-cert.gov/cas/techalerts/TA11-221A.html

[Third Party Advisory] https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/49033

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067

Scores

EPSS 0.6611

EPSS Percentile 98.5%

Classification

CWE

CWE-79

Status published

Affected Products (4)

microsoft/report_viewer

microsoft/report_viewer

microsoft/visual_studio

n/a/n/a

Timeline

Published Aug 10, 2011

Tracked Since Feb 18, 2026