CVE-2005-0452

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

23.37% chance of exploitation in the next 30 days, 98th percentile

Published

2005-02-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25110

References

• CVE Record
• NVD entry

Related

• CVE-2005-0443
• CVE-2005-0455
• CVE-2005-0442
• CVE-2005-0464
• CVE-2005-0439
• CVE-2005-0465