CVE

Id
23296  
CVE No.
CVE-2006-7192  
Status
Candidate  
Description
Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.  
Phase
Assigned (20070410)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
224173 23296 CVE-2006-7192 BUGTRAQ:20070405 Microsoft .NET request filtering bypass vulnerability (BID 20753)  View
224174 23296 CVE-2006-7192 URL:http://www.securityfocus.com/archive/1/archive/1/464796/100/0/threaded  View
224175 23296 CVE-2006-7192 MISC:http://www.cpni.gov.uk/docs/re-20061020-00710.pdf  View
224176 23296 CVE-2006-7192 MISC:http://www.procheckup.com/Vulner_PR0703.php  View
224177 23296 CVE-2006-7192 BID:20753  View
224178 23296 CVE-2006-7192 URL:http://www.securityfocus.com/bid/20753  View
224179 23296 CVE-2006-7192 OSVDB:35269  View
224180 23296 CVE-2006-7192 URL:http://osvdb.org/35269  View
224181 23296 CVE-2006-7192 SREASON:2530  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56207 JVNDB-2007-004899 Agora の modules/Mysqlfinder/MysqlfinderAdmin.php における PHP リモートファイルインクルージョンの脆弱性 Agora の modules/Mysqlfinder/MysqlfinderAdmin.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-7194 23296 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004899.html  View