CVE-2004-2700 Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.
HighCVSS 9.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspdotnetstorefront | = 3.3 | No fix listed |
References
- 20040609 ASPDOTNETSTOREFRONT ASPDOTNETSTOREFRONT Improper Upload Validation mailing-list
- 11839 third-party-advisory vendor-advisory
- 6959 vdb-entry