Code injection vulnerability in Microsoft ASP.NET MVC

Description

XSS vulnerability was found in ASP.NET MVC. By exploiting this vulnerability malicious users can inject arbitrary script. This vulnerability can be exploited remotely via a specially designed web page.

Original advisories

• CVE-2014-4075

Related products

• Microsoft-ASP.NET-MVC

CVE list

• CVE-2014-4075
  warning

KB list

• 2993937
• 2990942
• 2993939
• 2993928
• 2994397
• 2992080

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com