CVE-2005-0452

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web…

published February 16, 2005

CVSS

—

EPSS

23%

Percentile

97.8

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.23373 · 97.8th percentile
Published: 2005-02-16T05:00Z

EPSS history

Timeline

16 FEB 05:00Z
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web…
cvelistv5