Vulnerabilities

TI-2004-01933 CVE-2004-2060 · GHSA-v6h4-3x3w-8xx3

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow…

LOW 34

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and fie…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07944 Published 2005-05-10 No fix listed

TI-2004-01932 CVE-2004-2059 · GHSA-xc4p-mwhf-mcmh

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to…

LOW 34

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_e…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08816 Published 2005-05-10 No fix listed

TI-2004-01931 CVE-2004-2058 · GHSA-jpmq-qqv8-q9xc

ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.

LOW 26

ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01793 Published 2005-05-10 No fix listed

TI-2004-01930 CVE-2004-2057 · GHSA-gr63-pfcm-52v6

SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.

LOW 36

SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01541 Published 2005-05-10 No fix listed

Vulnerabilities

Filters

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow…

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to…

ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.

SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.