← Vulnerability feed

Vulnerability record · CVE-2004-2059 · published 31 December 2004

CVE-2004-2059: Xlinesoft asprunner vulnerability

Xlinesoft · Asprunner

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.

5.0 CVSS 2.0 Medium EPSS 8.8% · top 5.0%
5.0CVSS 2.0 base score
8.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References, 6 tagged exploit
16 Jun 2026Last modified by NVD

Description

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html Exploit
http://ferruh.mavituna.com/article/?574 Exploit
http://marc.info/?l=bugtraq&m=109086977330418&w=2
http://secunia.com/advisories/12164
http://securitytracker.com/id?1010777
http://www.osvdb.org/8254
http://www.osvdb.org/8255
http://www.osvdb.org/8256
http://www.osvdb.org/8257
http://www.securityfocus.com/bid/10799 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16801
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html Exploit
http://ferruh.mavituna.com/article/?574 Exploit
http://marc.info/?l=bugtraq&m=109086977330418&w=2
http://secunia.com/advisories/12164
http://securitytracker.com/id?1010777
http://www.osvdb.org/8254
http://www.osvdb.org/8255
http://www.osvdb.org/8256
http://www.osvdb.org/8257
http://www.securityfocus.com/bid/10799 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16801

Track CVE-2004-2059 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-2057Xlinesoft asprunner vulnerabilitySQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.EPSS 1.5%5.0CVE-2004-2058Xlinesoft asprunner vulnerabilityASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.EPSS 1.8%5.0CVE-2004-2060Xlinesoft asprunner vulnerabilityASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct reques…EPSS 7.9%

Source: NIST National Vulnerability Database (record CVE-2004-2059), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.