Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Microsoft ASP.NET AutoPostBack Variable Cross-Site Scripting Vulnerability

Microsoft ASP.NET is prone to a cross-site scripting vulnerability because the software fails to properly sanitize user-supplied input before it is rendered in the browser of an unsuspecting user in the context of the affected site.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user, with the privileges of the victim userâ??s account. This may help the attacker steal cookie-based authentication credentials, retrieve sensitive information, and launch other attacks.







 

Privacy Statement
Copyright 2008, SecurityFocus