p PatchFirst

CVE-2005-0509

CVE-2005-0509

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

EPSS 15.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mono Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.6-4

    Update to 1.1.6-4

  • mono Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.6-4

    Update to 1.1.6-4

  • mono Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.6-4

    Update to 1.1.6-4

Original sources

Check your server →