Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft asp.net ValidateReques 跨站脚本攻击漏洞
Vulnerability Description
ASP.NET是由微软在.NET Framework中所提供的，开发Web应用程序的类库，提供ASP.NET网页处理、扩充以及HTTP通道的应用程序与通信处理等工作，以及Web Service的基础架构。 带有MS07-040更新的Microsoft .NET Framework中的ASP.NET存在请求验证(又称验证请求过滤器)漏洞。 由于没有正确地检测出危险的客户端输入，远程攻击者可以通过构造特定的STYLE元件，包含"<~/"序列的query string可以触发该漏洞，执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A