Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 27/05/2010 Updated: 28/05/2010

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote malicious users to conduct cross-site scripting (XSS) attacks against the form control via the __VIEWSTATE parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft asp.net 3.5

Advance scanner for config files left over, that may Contain usernames and passwords, also search for Cpanel, WordPress and WordPress plugins.

BETA HADES Advance scurity scanner for webserver vulnerabilities Features Beta release: search for Cpanel search for Sitemap search for WordPress Find WordPress plugins Find SQL Injection and Local File Inclusion (LFI) features for official release: Remote File Inclusion (RFI) CVE‑2010‑2088 Broken Authentication and Session Management Insecure Direct Object References C

CWE-79 https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf https://nvd.nist.gov https://github.com/mirai101/HADES

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-2088

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect