Unscored CVE-2003-0768 EUVD-2003-0759GHSA-m5m6-jv3w-6r55

Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null c…

Published Sep 12, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.

References

20030908 Advisory: Incorrect Handling of XSS Protection in ASP.Net mailing-list