CVE-2005-0452
medium · 4.3Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
4.3
CVSS
23.4%
EPSS (exploit prob.)
98th
EPSS percentile
2005-02-16
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | asp.net | 1.0 |
| microsoft | asp.net | 1.0 |
| microsoft | asp.net | 1.0 |
| microsoft | asp.net | 1.1 |
| microsoft | asp.net | 1.1 |
Check a specific version with /api/v1/cve/match.
References
- http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml
- http://marc.info/?l=bugtraq&m=110867912714913&w=2
- http://secunia.com/advisories/14214
- http://www.securityfocus.com/bid/12574
- http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml
- http://marc.info/?l=bugtraq&m=110867912714913&w=2
- http://secunia.com/advisories/14214
- http://www.securityfocus.com/bid/12574
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-0452