CVE-2010-2088

CVE-2010-2088 : The connected sources confirm a cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 3.5’s ASP.NET where an unencrypted __VIEWSTATE is not properly handled. This allows remote attackers to inject script via the ViewState parameter. Affected product/component: Micro...