CVE-2010-2084

Microsoft Asp.net - XSS

Title source: rule

Description

Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.

References (1)

[Various Sources] http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/03/30/configuration-is-half-the-battle-asp-net-and-cross-site-scripting.aspx

Scores

EPSS 0.0640

EPSS Percentile 90.9%

Classification

CWE

CWE-79

Status published

Affected Products (2)

microsoft/asp.net

n/a/n/a

Timeline

Published May 27, 2010

Tracked Since Feb 18, 2026