Asp.net@1.0 Security Vulnerabilities and Issues — Asp.net@1.0 CVE List

Lucene search

MicrosoftAsp.net1.0

3 matches found

CVE•added 2005/02/16 5:0 a.m.•82 views

CVE-2005-0452

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

4.3CVSS5.9AI score0.27074EPSS

CVE•added 2005/05/18 4:0 a.m.•74 views

CVE-2005-1664

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or ex...

6.4CVSS6.7AI score0.19652EPSS

CVE•added 2005/05/18 4:0 a.m.•64 views

CVE-2005-1665

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.

5CVSS6.6AI score0.34533EPSS