Microsoft » .net Framework : Security Vulnerabilities, CVEs, Published In 2008 (XSS) CVSS score >= 1
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.
Max CVSS
4.3
EPSS Score
39.76%
Published
2008-08-27
Updated
2018-10-30
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence.
Max CVSS
4.3
EPSS Score
40.37%
Published
2008-08-27
Updated
2018-10-11
2 vulnerabilities found