Hello all,
I'm looking for something that will help me with peforming a Cross-Site Scripting test on one of my Applications. We had the site scanned and it reported back that a few of the URLs were susceptible to the Microsoft Windows MHTML Cross-Site Scripting vulnerability. I'm pretty sure this is a false postive because it only reported it on 3 URLs that have input boxes, where there are several other pages that have the same input boxes but it didn't indicate an issue with them. Also we've already applied the patch from Microsoft back in April, Vulnerability in MHTML Could Allow Information Disclosure (2503658). But I need to be certain so I need to perform the test manually.
I'm not sure excatly how to manually perform a Cross Site scripting attack and I've looked at Firefox's addon XSS ME, but that doesn't appear to be be specific to the MHTML vulnerability. So I'm hoping there is a tool/app or some utility out there that I can use for this test, and possible future test if it pops up again in the next scan. The App is built off the .NET framework, if that helps.
Thanks,
Bob
