CVE-2001-1084

3 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 63.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Macromedia Jrun
Timeline
PublishedJul 2
Latest updateApr 30

Description

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmacromedia/jrun2.3.3, 3.0+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4hjp-vjqv-588c: Cross-site scripting vulnerability in Allaire JRun 3↗2022-04-30
▶
CVEList
CVE-2001-1084: Cross-site scripting vulnerability in Allaire JRun 3↗2002-06-25
▶