Description
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
References
- 20001023 Allaire JRUN 2.3 Arbitrary File Retrieval mailing-list
Published Nov 29, 2000 · Updated Aug 8, 2024 · Assigned by mitre
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.