CVE-2004-2059
MEDIUM 5.0EPSS 8.8%
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.
- CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 8.82% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2005-05-10
- Updated
- 2024-08-08
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/24316
- https://www.exploit-db.com/exploits/24315
- https://www.exploit-db.com/exploits/24314
- https://www.exploit-db.com/exploits/24313