EUVD-2004-2689

Malware in sbrugna...

AspDotNetStorefront 3.3 ReturnURL Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10507/info AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the 'returnurl' parameter of the...

CVE-2004-2701

Cross-site scripting XSS vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter...

CVE-2004-2701

CVE-2004-2701 is a cross-site scripting (XSS) vulnerability in AspDotNetStorefront 3.3, specifically in signin.aspx where an attacker can inject arbitrary web script or HTML via the returnurl parameter. Affected component is the signin.aspx handling of returnurl; root cause is improper handling o...