CVE

Id
11127  
CVE No.
CVE-2004-2701  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.  
Phase
Assigned (20071006)  
Votes
None (candidate not yet proposed)  
Comments