CVE-2005-0509
medium · 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
4.3
CVSS
15.9%
EPSS (exploit prob.)
97th
EPSS percentile
2005-03-14
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | .net_framework | 1.0 |
| microsoft | .net_framework | 1.0 |
| microsoft | .net_framework | 1.0 |
| microsoft | .net_framework | 1.1 |
| microsoft | .net_framework | 1.1 |
| mono | mono | 1.0.5 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-0509