Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft .NET Framework请求过滤绕过漏洞
Vulnerability Description
Microsoft .NET Framework是美国微软（Microsoft）公司开发的一种全面且一致的编程模型，也是一个用于构建Windows、Windows Store、Windows Phone、Windows Server和Microsoft Azure的应用程序的开发平台。该平台包括C#和Visual Basic编程语言、公共语言运行库和广泛的类库。 .NET Framework在处理内嵌请求时存在漏洞，攻击者可能利用此漏洞注入脚本代码执行。 .NET Framework没有正确的过滤内嵌的.
CVSS Information
N/A
Vulnerability Type
N/A