Vendor/product archive

aspdotnetstorefront / aspdotnetstorefront CVEs

Beta · best-effort

3 CVEs tagged to aspdotnetstorefront / aspdotnetstorefront — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to aspdotnetstorefront vendor archive

CVE-2004-2699

Published Dec 31, 2004

deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2004-2700

Published Dec 31, 2004

Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2004-2701

Published Dec 31, 2004

Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1