Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2004-2060

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names.
0
0
Attacker Value
Unknown

CVE-2004-2059

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.
0
0
Attacker Value
Unknown

CVE-2004-2058

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.
0
0
Attacker Value
Unknown

CVE-2004-2057

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
0
0