CVE

Id
10485  
CVE No.
CVE-2004-2059  
Status
Candidate  
Description
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments