Hi,
I have an asp.net webpage with one text box (txtRequestNumber) and there is a RangeValidator checking the value being entered. The user is allowed to enter only numeric value.
I have a submit button which when clicked fetches data based on the number entered in the text box.
When i try and do a vulnerability scan on the webpage, the result shows there is an xss vulnerability and the payload is as below...
__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=%
2fwEPDwULLTE3MDY5ODU5MTQPZBYCAgUPZBYCAgkPZBYCAgEPDxYCHgRUZXh0BUpQbGVhc2UgZW50ZXIgdGhlIHNlcnZpY2UgcmVxdWVzdCBudW1iZXIgYW5kIGNsa
NrIHRoZSAnR2V0IFN0YXR1cycgYnV0dG9uLmRkZGZ9Mytd3tl%2fOO5w0OJb%
2fh2zBYOT&__EVENTVALIDATION=%2fwEWBwKk0oW4BgLZstmRDALOrabXAwL%2b55nXCgLpjf7DDAKQ8Mz0AgK4zv%2bXBoJ%
2br3UQN2AoAGstVMnTEH3F7lHS&txtRequestNumber=%3c%0bscript%20a%3d4%3eqss%3d777%3c%0b%2fscript%3e&btnGetStatus=
Get%20Status
Clearly the ...
Go to the complete details ...