Xlinesoft Asprunner
4 CVEs affecting Xlinesoft Asprunner. Latest disclosed: 2004-12-31. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2004-2060 | | 2004-12-31 | ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the d… | |
CVE-2004-2059 | | 2004-12-31 | Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in… | |
CVE-2004-2058 | | 2004-12-31 | ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages. | |
CVE-2004-2057 | | 2004-12-31 | SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements. |