296,138
Total vulnerabilities in the database
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
Software | From | Fixed in |
---|---|---|
microsoft / commerce_server | 2002-sp1 | 2002-sp1.x |
microsoft / commerce_server | 2002 | 2002.x |