Security Advisory
CVE-2006-1257
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.