CVE-2006-1257

no score yetEPSS 30%

microsoft commerce server: no CVSS score yet. EPSS 30% chance of exploitation in the next 30 days.

The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.

EPSS: 30% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2006-03-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:commerce_server

References

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp
http://securityreason.com/securityalert/594
http://www.osvdb.org/24121
http://www.securityfocus.com/archive/1/427974/100/0/threaded
http://www.securityfocus.com/bid/17134

Check your stack JSON