xlinesoft asprunner 2.4 vulnerabilities and exploits

(subscribe to this query)

668

VMScore

SQL injection vulnerability in ASPRunner 2.4 allows remote malicious users to execute arbitrary SQL statements.

Xlinesoft Asprunner 1.0 Xlinesoft Asprunner 2.0 Xlinesoft Asprunner 2.1 Xlinesoft Asprunner 2.2 Xlinesoft Asprunner 2.3 Xlinesoft Asprunner 2.4

445

VMScore

ASPRunner 2.4 allows remote malicious users to gain sensitive information via (1) hidden form fields or (2) error messages.

Xlinesoft Asprunner 1.0 Xlinesoft Asprunner 2.0 Xlinesoft Asprunner 2.1 Xlinesoft Asprunner 2.2 Xlinesoft Asprunner 2.3 Xlinesoft Asprunner 2.4

520

VMScore

Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, ...

Xlinesoft Asprunner 2.0 Xlinesoft Asprunner 2.1 Xlinesoft Asprunner 2.2 Xlinesoft Asprunner 2.3 Xlinesoft Asprunner 2.4 Xlinesoft Asprunner 1.0

4 EDB exploits

505

VMScore

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote malicious users to obtain the database via a direct request to the database filename, which is predictable based on table and field names.

Xlinesoft Asprunner 2.2 Xlinesoft Asprunner 2.3 Xlinesoft Asprunner 2.4 Xlinesoft Asprunner 1.0 Xlinesoft Asprunner 2.0 Xlinesoft Asprunner 2.1

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook