CVE-2004-2701 Information

Description

Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.

Reference

http://archives.neohapsis.com/archives/bugtraq/2004-06/0129.html http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0229.html http://secunia.com/advisories/11839 http://www.securityfocus.com/bid/10507 https://exchange.xforce.ibmcloud.com/vulnerabilities/16426 Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.