Secunia Research Advisory – A vulnerability has been reported in ASP.NET, which can be exploited by malicious people to bypass the “Request Validation” security mechanism. The “Request Validation” mechanism designed to protect against Cross-Site Scripting and SQL injection allows restricted tags when they include a NULL byte. However, this is a problem since some browsers, like Internet Explorer, ignore NULL bytes when parsing input, which may cause them to execute the content in the tags anyway.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31642/dotnet.txt
Source: https://packetstormsecurity.com/files/31642/dotnet.txt.html