CVE-2010-2084 | BDVDB-2026-41896 Detail

Description#

Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/03/30/configuration-is-half-the-battle-asp-net-and-cross-site-scripting.aspx

Exploit#

No public exploit known

History#

Version 12010-05-27Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.