What is CVE-2005-0452?

CVE-2005-0452 is a vulnerability in Microsoft Asp.net. Published 2005-02-16.

Is CVE-2005-0452 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Asp.net

CVE-2005-0452

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

EPSS: 0.234 (97.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Asp.net — versions 1.0, 1.1
N/a — versions n/a

Public proof-of-concept exploits

AndreyRusyaev/secreports

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2005-0452?: CVE-2005-0452 is a vulnerability in Microsoft Asp.net. Published 2005-02-16.
Is CVE-2005-0452 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.