CVE-2005-0509

published 2005-03-14

CVE-2005-0509: Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web…

Priority P4 21 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	mono	< mono 1.1.6-4 (bookworm)	mono 1.1.6-4 (bookworm)
microsoft	net_framework	—	—
microsoft	net_framework	—	—
mono	mono	—	—
mono	mono	>= 0 < 1.1.6-4	1.1.6-4
mono	mono	>= 0 < 1.1.6-4	1.1.6-4
mono	mono	>= 0 < 1.1.6-4	1.1.6-4
mono	mono	>= 0 < 1.1.6-4	1.1.6-4

CVSS provenance

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N

osv 4.3 MEDIUM

vendor_debian 4.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.