Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in TABLE-NAME_search.asp (2) SQL parameter in TABLE-NAME_edit.asp (3) SearchFor parameter in TABLE_list.asp or (4) SQL parameter in export.asp.