CVE-2004-2700: Aspdotnetstorefront

High severity, CVSS 9.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.

Affected products

Published 2004-12-31. Last modified 2026-06-16.