CVEvulnerability
CVE-2006-3436
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
Affected configurations
• microsoft .net framework 2.0
References
- http://secunia.com/advisories/22307 Vendor Advisory
- http://securitytracker.com/id?1017029 securitytracker.com
- http://www.kb.cert.org/vuls/id/455604 US Government Resource
- http://www.securityfocus.com/archive/1/449179/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20337 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3976 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28658 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377 oval.cisecurity.org
- http://secunia.com/advisories/22307 Vendor Advisory
- http://securitytracker.com/id?1017029 securitytracker.com
- http://www.kb.cert.org/vuls/id/455604 US Government Resource
- http://www.securityfocus.com/archive/1/449179/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20337 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3976 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28658 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377 oval.cisecurity.org