CVE-2006-3436
published 2006-10-10CVE-2006-3436: Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors…
PriorityP426medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
37.77%
98.4th percentile
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | net_framework | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft ASP.NET 2.0 AutoPostBack cross site scripting (MS06-056 / VU#455604)
vuldb·2026-04-24·CVSS 4.3
CVE-2006-3436 [MEDIUM] Microsoft ASP.NET 2.0 AutoPostBack cross site scripting (MS06-056 / VU#455604)
A vulnerability, which was classified as critical, was found in Microsoft ASP.NET 2.0. The impacted element is an unknown function. The manipulation of the argument AutoPostBack results in basic cross site scripting.
This vulnerability is reported as CVE-2006-3436. The attack can be launched remotely. Moreover, an exploit is present.
Applying a patch is advised to resolve this issue.
GHSA
GHSA-hpqm-5grx-cv58: Cross-site scripting (XSS) vulnerability in Microsoft
ghsa_unreviewed·2022-05-01
CVE-2006-3436 [MEDIUM] GHSA-hpqm-5grx-cv58: Cross-site scripting (XSS) vulnerability in Microsoft
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/22307http://securitytracker.com/id?1017029http://www.kb.cert.org/vuls/id/455604http://www.securityfocus.com/archive/1/449179/100/0/threadedhttp://www.securityfocus.com/bid/20337http://www.vupen.com/english/advisories/2006/3976https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056https://exchange.xforce.ibmcloud.com/vulnerabilities/28658https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377http://secunia.com/advisories/22307http://securitytracker.com/id?1017029http://www.kb.cert.org/vuls/id/455604http://www.securityfocus.com/archive/1/449179/100/0/threadedhttp://www.securityfocus.com/bid/20337http://www.vupen.com/english/advisories/2006/3976https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056https://exchange.xforce.ibmcloud.com/vulnerabilities/28658https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377
2006-10-10
Published