Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.3%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2010-1459
  • Mono » Mono » Version: 1.0
    cpe:2.3:a:mono:mono:1.0
  • Mono » Mono » Version: 1.0.1
    cpe:2.3:a:mono:mono:1.0.1
  • Mono » Mono » Version: 1.0.2
    cpe:2.3:a:mono:mono:1.0.2
  • Mono » Mono » Version: 1.0.4
    cpe:2.3:a:mono:mono:1.0.4
  • Mono » Mono » Version: 1.0.5
    cpe:2.3:a:mono:mono:1.0.5
  • Mono » Mono » Version: 1.0.6
    cpe:2.3:a:mono:mono:1.0.6
  • Mono » Mono » Version: 1.1.1
    cpe:2.3:a:mono:mono:1.1.1
  • Mono » Mono » Version: 1.1.10
    cpe:2.3:a:mono:mono:1.1.10
  • Mono » Mono » Version: 1.1.10.1
    cpe:2.3:a:mono:mono:1.1.10.1
  • Mono » Mono » Version: 1.1.11
    cpe:2.3:a:mono:mono:1.1.11
  • Mono » Mono » Version: 1.1.12
    cpe:2.3:a:mono:mono:1.1.12
  • Mono » Mono » Version: 1.1.12.1
    cpe:2.3:a:mono:mono:1.1.12.1
  • Mono » Mono » Version: 1.1.13
    cpe:2.3:a:mono:mono:1.1.13
  • Mono » Mono » Version: 1.1.13.2
    cpe:2.3:a:mono:mono:1.1.13.2
  • Mono » Mono » Version: 1.1.13.4
    cpe:2.3:a:mono:mono:1.1.13.4
  • Mono » Mono » Version: 1.1.13.5
    cpe:2.3:a:mono:mono:1.1.13.5
  • Mono » Mono » Version: 1.1.13.6
    cpe:2.3:a:mono:mono:1.1.13.6
  • Mono » Mono » Version: 1.1.13.7
    cpe:2.3:a:mono:mono:1.1.13.7
  • Mono » Mono » Version: 1.1.13.8
    cpe:2.3:a:mono:mono:1.1.13.8
  • Mono » Mono » Version: 1.1.13.8.1
    cpe:2.3:a:mono:mono:1.1.13.8.1
  • Mono » Mono » Version: 1.1.14
    cpe:2.3:a:mono:mono:1.1.14
  • Mono » Mono » Version: 1.1.15
    cpe:2.3:a:mono:mono:1.1.15
  • Mono » Mono » Version: 1.1.16
    cpe:2.3:a:mono:mono:1.1.16
  • Mono » Mono » Version: 1.1.16.1
    cpe:2.3:a:mono:mono:1.1.16.1
  • Mono » Mono » Version: 1.1.17
    cpe:2.3:a:mono:mono:1.1.17
  • Mono » Mono » Version: 1.1.17.1
    cpe:2.3:a:mono:mono:1.1.17.1
  • Mono » Mono » Version: 1.1.17.2
    cpe:2.3:a:mono:mono:1.1.17.2
  • Mono » Mono » Version: 1.1.18
    cpe:2.3:a:mono:mono:1.1.18
  • Mono » Mono » Version: 1.1.2
    cpe:2.3:a:mono:mono:1.1.2
  • Mono » Mono » Version: 1.1.3
    cpe:2.3:a:mono:mono:1.1.3
  • Mono » Mono » Version: 1.1.4
    cpe:2.3:a:mono:mono:1.1.4
  • Mono » Mono » Version: 1.1.5
    cpe:2.3:a:mono:mono:1.1.5
  • Mono » Mono » Version: 1.1.6
    cpe:2.3:a:mono:mono:1.1.6
  • Mono » Mono » Version: 1.1.7
    cpe:2.3:a:mono:mono:1.1.7
  • Mono » Mono » Version: 1.1.8
    cpe:2.3:a:mono:mono:1.1.8
  • Mono » Mono » Version: 1.1.8.1
    cpe:2.3:a:mono:mono:1.1.8.1
  • Mono » Mono » Version: 1.1.8.3
    cpe:2.3:a:mono:mono:1.1.8.3
  • Mono » Mono » Version: 1.1.9
    cpe:2.3:a:mono:mono:1.1.9
  • Mono » Mono » Version: 1.1.9.1
    cpe:2.3:a:mono:mono:1.1.9.1
  • Mono » Mono » Version: 1.1.9.2
    cpe:2.3:a:mono:mono:1.1.9.2
  • Mono » Mono » Version: 1.2
    cpe:2.3:a:mono:mono:1.2
  • Mono » Mono » Version: 1.2.1
    cpe:2.3:a:mono:mono:1.2.1
  • Mono » Mono » Version: 1.2.2
    cpe:2.3:a:mono:mono:1.2.2
  • Mono » Mono » Version: 1.2.2.1
    cpe:2.3:a:mono:mono:1.2.2.1
  • Mono » Mono » Version: 1.2.3
    cpe:2.3:a:mono:mono:1.2.3
  • Mono » Mono » Version: 1.2.3.1
    cpe:2.3:a:mono:mono:1.2.3.1
  • Mono » Mono » Version: 1.2.4
    cpe:2.3:a:mono:mono:1.2.4
  • Mono » Mono » Version: 1.2.5
    cpe:2.3:a:mono:mono:1.2.5
  • Mono » Mono » Version: 1.2.5.1
    cpe:2.3:a:mono:mono:1.2.5.1
  • Mono » Mono » Version: 1.2.5.2
    cpe:2.3:a:mono:mono:1.2.5.2
  • Mono » Mono » Version: 1.2.6
    cpe:2.3:a:mono:mono:1.2.6
  • Mono » Mono » Version: 1.9
    cpe:2.3:a:mono:mono:1.9
  • Mono » Mono » Version: 1.9.1
    cpe:2.3:a:mono:mono:1.9.1
  • Mono » Mono » Version: 2.0
    cpe:2.3:a:mono:mono:2.0
  • Mono » Mono » Version: 2.0.1
    cpe:2.3:a:mono:mono:2.0.1
  • Mono » Mono » Version: 2.2
    cpe:2.3:a:mono:mono:2.2
  • Mono » Mono » Version: 2.4
    cpe:2.3:a:mono:mono:2.4
  • Mono » Mono » Version: 2.4.2
    cpe:2.3:a:mono:mono:2.4.2
  • Mono » Mono » Version: 2.4.2.1
    cpe:2.3:a:mono:mono:2.4.2.1
  • Mono » Mono » Version: 2.4.2.2
    cpe:2.3:a:mono:mono:2.4.2.2
  • Mono » Mono » Version: 2.4.2.3
    cpe:2.3:a:mono:mono:2.4.2.3
  • Mono » Mono » Version: 2.4.3
    cpe:2.3:a:mono:mono:2.4.3


Contact Us

Shodan ® - All rights reserved