Security Research

Thursday, 21 August 2008by Richard Brain

0 

Microsoft ASP.NET ValidateRequest filters can be bypassed allowing XSS and HTML injection attacks

ProCheckUp discovered a method to bypass ASP .NET ValidateRequest filters, enabling XSS and HTML injection attacks even on systems updated with the ....

Thursday, 21 August 2008by Richard Brain

0 

Research Paper: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks

The Microsoft .NET framework's ValidateRequest feature, integral to ASP.NET since version 1.1, aims to thwart web input validation attacks like HTM ....