Skip to content
Noroxi

aspdotnetstorefront records

3 published records for vendor aspdotnetstorefront.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2004-2700
      37Monitor

      Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with

      CriticalCVSS 9.0No exploitEPSS 2%

      aspdotnetstorefront · aspdotnetstorefrontDec 31, 2004

    • CVE-2004-2699
      18Monitor

      deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.

      MediumCVSS 4.3Proof of conceptEPSS 2%

      aspdotnetstorefront · aspdotnetstorefrontDec 31, 2004

    • CVE-2004-2701
      17Monitor

      Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script o

      MediumCVSS 4.3Proof of conceptEPSS 2%

      aspdotnetstorefront · aspdotnetstorefrontDec 31, 2004