https://www.exploit-db.com/exploits/24316
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200412-159

ASPRunner2.4版本存在多个跨站脚本漏洞。远程攻击者可以借助多个参数注入任意web脚本或HTML，这些参数包括(1)[TABLE-NAME]_search.asp的SearchFor参数，(2)[TABLE-NAME]_edit.asp的SQL参数(3)[TABLE]_list.asp的SearchFor参数或(4)export.asp的SQL参数。

source: http://www.securityfocus.com/bid/10799/info
 
ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files.
 
ASPRunner versions 2.4 and prior are affect by these issues.

http://www.example.com/export.asp?SQL=%22%3E%3Cscript%3Ealert%28document.cookie%29%
3C%2Fscript%3Eselect+%5Bword_id%5D%2C+%5Bword_id%5D%2C+++%5Btr%5D%2C+++%5Ben
%5D%2C+++%5Bdesc%5D++From+%5Bdictionary%5D++order+by+%5Ben%5D+desc&mypage=1&
pagesize=20

来源:XF
名称:asprunner-xss(16801)
链接:http://xforce.iss.net/xforce/xfdb/16801
来源:BID
名称:10799
链接:http://www.securityfocus.com/bid/10799
来源:SECUNIA
名称:12164
链接:http://secunia.com/advisories/12164
来源:BUGTRAQ
名称:20040726ASPRunnerMultipleVulnerabilities
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=109086977330418&w;=2
来源:ferruh.mavituna.com
链接:http://ferruh.mavituna.com/article/?574
来源:VULNWATCH
名称:20040726ASPRunnerMultipleVulnerabilities
链接:http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html
来源:OSVDB
名称:8257
链接:http://www.osvdb.org/8257
来源:OSVDB
名称:8256
链接:http://www.osvdb.org/8256
来源:OSVDB
名称:8255
链接:http://www.osvdb.org/8255
来源:OSVDB
名称:8254
链接:http://www.osvdb.org/8254
来源:SECTRACK
名称:1010777
链接:http://securitytracker.com/id?1010777