| Package | Affected versions | Patched versions |
|---|---|---|
| .net framework | = 1.0 |
orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free