4.3

CVE-2005-0452

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Asp.Net Version1.0
Microsoft ≫ Asp.Net Version1.0 Updatesp1
Microsoft ≫ Asp.Net Version1.0 Updatesp2
Microsoft ≫ Asp.Net Version1.1
Microsoft ≫ Asp.Net Version1.1 Updatesp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 23.37% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml
Vendor Advisory
http://marc.info/?l=bugtraq&m=110867912714913&w=2
http://secunia.com/advisories/14214
Vendor Advisory
http://www.securityfocus.com/bid/12574
Vendor Advisory