Vulnerabilities

TI-2004-02571 CVE-2004-2701 · GHSA-pg9f-hrgx-gm27

Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3…

LOW 23

Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2007-10-06 No fix listed CWE-79

TI-2004-02570 CVE-2004-2700 · GHSA-7348-84cp-xjx4

Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote…

MEDIUM 42

Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01715 Published 2007-10-06 No fix listed CWE-264

TI-2004-02569 CVE-2004-2699 · GHSA-qgjx-vfjf-jmpv

deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary…

LOW 24

deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0217 Published 2007-10-06 No fix listed CWE-264

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3…

Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote…

deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary…