CVE-2006-1257

None

CVSS

—

EPSS

30.3%

Published

Mar 19, 2006

CISA due date

—

The record

The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.

Affected packages

Ecosystem	Package	Introduced	Fixed