CVE-2006-3436

MEDIUM 4.3CVE-2006-3436 · Published 10/10/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
.net framework microsoft	`= 2.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".

References

secunia.com/advisories/22307 · Vendor Advisory
securitytracker.com/id
kb.cert.org/vuls/id/455604 · US Government Resource
securityfocus.com/archive/1/449179/100/0/threaded
securityfocus.com/bid/20337
vupen.com/english/advisories/2006/3976
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056
exchange.xforce.ibmcloud.com/vulnerabilities/28658
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free