CVE-2004-2699
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
31/12/2004
Last modified:
03/04/2025
Description
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:aspdotnetstorefront:aspdotnetstorefront:3.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html
- http://secunia.com/advisories/11839
- http://securityreason.com/securityalert/3206
- http://www.osvdb.org/6958
- http://www.securityfocus.com/archive/1/365559
- http://www.securityfocus.com/bid/10506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16377
- http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html
- http://secunia.com/advisories/11839
- http://securityreason.com/securityalert/3206
- http://www.osvdb.org/6958
- http://www.securityfocus.com/archive/1/365559
- http://www.securityfocus.com/bid/10506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16377