Unscored severity · published Oct 10, 2006
CVE-2006-3436
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET…
–
CVSS
38.7%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
Exploitation
Is it being used?
Exploit prediction (EPSS)38.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
.net Framework · Microsoft
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3436
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3436
Vendor Advisory
http://secunia.com/advisories/22307
securitytracker.com
http://securitytracker.com/id?1017029
US Government Resource
http://www.kb.cert.org/vuls/id/455604
www.securityfocus.com
http://www.securityfocus.com/archive/1/449179/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20337
www.vupen.com
http://www.vupen.com/english/advisories/2006/3976
More from .net Framework
9.8
CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability
7.8
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
7.8
CVE-2017-8759
Microsoft .NET Framework Remote Code Execution Vulnerability
7.8
CVE-2015-1671
Microsoft Windows Remote Code Execution Vulnerability
7.5
CVE-2024-29059
.NET Framework Information Disclosure Vulnerability