Vulnerability Details CVE-2004-2699
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.061
EPSS Ranking 90.8%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html
- http://secunia.com/advisories/11839
- http://securityreason.com/securityalert/3206
- http://www.osvdb.org/6958
- http://www.securityfocus.com/archive/1/365559
- http://www.securityfocus.com/bid/10506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16377
- http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html
- http://secunia.com/advisories/11839
- http://securityreason.com/securityalert/3206
- http://www.osvdb.org/6958
- http://www.securityfocus.com/archive/1/365559
- http://www.securityfocus.com/bid/10506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16377
Products affected by CVE-2004-2699
-
cpe:2.3:a:aspdotnetstorefront:aspdotnetstorefront:3.3