CVE-2004-2060: Xlinesoft Asprunner

Medium severity, CVSS 5.0. EPSS: 7.9% chance of exploitation in the next 30 days.

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names.

Affected products

• Xlinesoft Asprunner: version 1.0 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only

Published 2004-12-31. Last modified 2026-06-16.