Aspdotnetstorefront: Security Vulnerabilities
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.
CVSS Score
4.3
EPSS Score
0.061
Published
2004-12-31
Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.
CVSS Score
9.0
EPSS Score
0.004
Published
2004-12-31
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.
CVSS Score
4.3
EPSS Score
0.006
Published
2004-12-31