XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure



EKU-ID: 29731 CVE: CVE-2004-2060;OSVDB-8253 OSVDB-ID:
Author: Ferruh Mavituna Published: 2004-07-26 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/10799/info

ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.

ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/db/[DB-FILE-NAME]