Unscored CVE-2001-1084 EUVD-2001-1065GHSA-4hjp-vjqv-588c

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, …

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.

References

java-servlet-crosssite-scripting(6793) vdb-entry
20010702 Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability mailing-list
MPSB01-06 vendor-advisory
1891 vdb-entry
2983 vdb-entry
VU#654643 third-party-advisory