CVE-2004-2060

CVE-2004-2060 describes an information disclosure vulnerability in XLineSoft ASPRunner versions 1.0 and 2.x. The software stores its database directly under the web root in a predictable location, allowing unauthenticated remote attackers to download the database by directly requesting its filename. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has low attack complexity, potentially leading to sensitive data exposure. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists, and the CVE has received minimal community discussion or media coverage.