NVD

Id
3704  
Name
CVE-2008-3842  
Description
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-08-27  
Modified Date
2016-11-08  
Seq
2008-3842  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23459 3704 CVE-2008-3842 4193  View
23460 3704 CVE-2008-3842 http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf  View
23461 3704 CVE-2008-3842 20080821 PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks  View
23462 3704 CVE-2008-3842 asp-validaterequest-xss(44741)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49487 JVNDB-2008-004797 Microsoft .NET Framework 1.1 SP1 および 2.0 の ASP.NET のリクエスト検証におけるクロスサイトスクリプティング攻撃を実行される脆弱性 Microsoft .NET Framework 1.1 SP1 および 2.0 の ASP.NET リクエスト検証は、MS07-040 の更新が未対応の際、危険なクライアント入力を適切に検知しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2008-3842 33955 CVE-2008-3842 3704 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004797.html 2008-08-27 2012-09-25 View