Описание
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:microsoft:asp.net:1.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net:1.0:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net:1.0:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net:1.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net:1.1:sp1:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.26611
Средний
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
EPSS
Процентиль: 96%
0.26611
Средний
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other