QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-2059

Back to search

CVE-2004-2059

Published: May 10, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.

VendorProductVersions

n/a

n/a

affected
n/a

References

asprunner-xss(16801)
vdb-entry
x_refsource_XF
8256
vdb-entry
x_refsource_OSVDB
12164
third-party-advisory
x_refsource_SECUNIA
20040726 ASPRunner Multiple Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
8255
vdb-entry
x_refsource_OSVDB
1010777
vdb-entry
x_refsource_SECTRACK
20040726 ASPRunner Multiple Vulnerabilities
mailing-list
x_refsource_VULNWATCH
10799
vdb-entry
x_refsource_BID
8254
vdb-entry
x_refsource_OSVDB
8257
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now