Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0413

4 documents4 sources
Severity
6.8MEDIUM
EPSS
1.9%
top 16.55%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SUN ONE Application Server
Timeline
PublishedJun 30
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: sunsolve.sun.com ↗Patch: www.ciac.org ↗Patch: www.iss.net ↗

🔴Vulnerability Details

2
GHSA
GHSA-7vrv-hpp3-h923: Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7↗2022-04-29
▶
CVEList
CVE-2003-0413: Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7↗2003-06-11
▶

💥Exploits & PoCs

1
Exploit-DB
Sun ONE Application Server 7.0 - Error Message Cross-Site Scripting↗2003-05-27
▶