Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explorer 'toStaticHTML()' HTML过滤信息泄露漏洞
Vulnerability Description
Microsoft Internet Explorer是美国微软（Microsoft）公司发布的Windows操作系统中默认捆绑的Web浏览器。 IE在实例化HTML时使用特定字符串处理内容时，Microsoft Internet Explorer的“toStaticHTML()”函数中存在HTML过滤信息泄露漏洞。远程攻击者可通过构建一个允许信息泄露的特制网页来利用该漏洞，在使用toStaticHTML API站点的用户安全上下文中执行脚本。
CVSS Information
N/A
Vulnerability Type
N/A