CVE
- Id
- 10485
- CVE No.
- CVE-2004-2059
- Status
- Candidate
- Description
- Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.
- Phase
- Assigned (20050504)
- Votes
- None (candidate not yet proposed)
- Comments