VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Mar 14, 2005· Updated Apr 16, 2026

CVE-2005-0509

CVE-2005-0509

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

Affected products

6
  • Microsoft/.net Framework5 versions
    cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:1.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:1.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*
  • Mono/Mono
    cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.