CVE-2010-2084

ASP.NET 2.0 - Cross-Site Scripting via InnerHtml Property

Title source: llm

Description

Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.

References (1)

Core 1

Core References

Various Sources x_refsource_misc

http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/03/30/configuration-is-half-the-battle-asp-net-and-cross-site-scripting.aspx

Scores

EPSS 0.1254

EPSS Percentile 95.8%

Details

CWE

CWE-79

Status published

Products (1)

microsoft/asp.net 2.0

Published May 27, 2010

Tracked Since Feb 18, 2026