← back
CVE-2006-3436

CVE-2006-3436

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 38%
exploitation probability
38%top 2% of all CVEs
observed exploitation
nono source reports it
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
Affected products
n/a · n/a
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056http://secunia.com/advisories/22307http://securitytracker.com/id?1017029https://exchange.xforce.ibmcloud.com/vulnerabilities/28658https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377http://www.kb.cert.org/vuls/id/455604http://www.securityfocus.com/archive/1/449179/100/0/threadedhttp://www.securityfocus.com/bid/20337http://www.vupen.com/english/advisories/2006/3976