Microsoft ASP.NET ValidateRequest filters can be bypassed allowing for cross site scripting and HTML injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69324/PR08-20.txt
Source: https://packetstormsecurity.com/files/69324/ProCheckUp-Security-Advisory-2008.20.html