CVE-2004-2699

deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.

Date published : 2007-10-06

http://www.securityfocus.com/bid/10506

http://www.securityfocus.com/archive/1/365559