CVE-2004-2059

The provided text describes multiple vulnerabilities in ASPRunner versions 2.4 and prior, including SQL injection, XSS, information disclosure, and unauthorized database access. It includes a URL demonstrating an XSS attack via the 'SearchFor' parameter.

This is a writeup describing multiple vulnerabilities in ASPRunner, including SQL injection, XSS, information disclosure, and unauthorized database access. The provided URL demonstrates an XSS payload in the 'SearchFor' parameter.

This exploit demonstrates an XSS vulnerability in ASPRunner by injecting a malicious script into the 'SQL' parameter of the edit page. The script executes arbitrary JavaScript, potentially stealing cookies or performing other client-side attacks.

This exploit demonstrates an XSS vulnerability in ASPRunner by injecting a script tag into the 'SQL' parameter of the export.asp page. The payload executes arbitrary JavaScript, confirming the vulnerability.