| Package | Affected versions | Patched versions |
|---|---|---|
| commerce server | = 2002 |
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free