Weak Authentication

org.eclipse.jetty, jetty-openid is vulnerable to Weak Authentication. The vulnerability is caused by a logical programming defect in the validateRequest function in the OpenIdAuthenticator.java class which allows current requests to still proceed even when LoginService does return that the...

CVE-2008-3842

ASP.NET ValidateRequest filters in the Microsoft .NET Framework are vulnerable to bypass and enable cross-site scripting (XSS) when the MS07-040 update is not applied. The issue affects the request validation mechanism (ValidateRequest) used to filter user input, exemplified by a dangerous query ...

PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Microsoft .NET framework comes with a request validation feature, configurable by the ValidateRequest setting. ValidateRequest has been a feature of ASP.NET since version 1.1. This feature consists of a series of filters, designed to prevent class...