CVE-2006-3436

Microsoft .NET Framework 2.0 - Cross-Site Scripting via ASP.NET AutoPostBack Controls

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20337
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/449179/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3976
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017029
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/455604
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28658
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22307
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377

Scores

EPSS 0.3777
EPSS Percentile 98.4%

Details

Status published
Products (1)
microsoft/.net_framework 2.0
Published Oct 10, 2006
Tracked Since Feb 18, 2026