CVE-2006-3436: XSS
Published Oct 10, 2006
·Updated
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
Affected Software
1 affected component
Microsoft .NET Framework=2.0
Event History
Oct 10, 2006
CVE Published
09:07 PM
Data Sourced
via NVD·09:07 PM
DescriptionSeverityAffected Software
Oct 11, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3436?
CVE-2006-3436 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2006-3436?
To mitigate CVE-2006-3436, users should update to the latest version of Microsoft .NET Framework that addresses this vulnerability.
3
What are the affected versions of CVE-2006-3436?
CVE-2006-3436 affects Microsoft .NET Framework version 2.0.
4
What type of vulnerability is CVE-2006-3436?
CVE-2006-3436 is a cross-site scripting (XSS) vulnerability.
5
Who can exploit CVE-2006-3436?
Remote attackers can exploit CVE-2006-3436 by injecting arbitrary web scripts or HTML through specific ASP.NET controls.