Other nomination

Microsoft ASP.NET Request Validation Bypass Vulnerability

Richard Brain, Jan Fry and Adrian Pastor

ProCheckUp advisory PR07-03 (CVE-2006-7192): ASP.NET request validation is bypassed by a bogus closing tag carrying a CSS expression, with comments splitting the keyword as e/**/xpression. Four payloads cover alert, redirect, cookie theft and injecting a full login form from an external .js file. Fixed by MS07-040.

Record

Researcher

Richard Brain, Jan Fry and Adrian Pastor

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Related sources

• (POC)

Tags

• xss
• filter-bypass
• aspnet
• dotnet
• css-injection
• cve
• vendor-advisory
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Richard Brain, Jan Fry and Adrian Pastor, first published at the original source. Preserved copies are kept so the citation survives its host.