CVE-2006-7192

Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and…

published April 10, 2007

CVSS

—

EPSS

23%

Percentile

97.7

In the wild

Unconfirmed

What it is

Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.22807 · 97.7th percentile
Published: 2007-04-10T22:00Z

EPSS history

Timeline

10 APR 22:00Z
Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and…
cvelistv5