The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) \\\\ (backslash) or (2) \%5C\ (encoded backslash) aka \Path Validation Vulnerability.\