5067 matches found
JBoss 3.2.1: Remote Command Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================ Illegalaccess.org Security Alert ================================ Date : 10/04/2003 Application : JBoss, java server for running J2EE enterprise applications Version : 3.2.1 Website : http://www.jboss.org Problems :...
Update JBoss 308 & 321: Remote Command Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Adam, thanks for the question, here is the answer: just downloaded the 3.0.8 from Jboss.org and changed the port of the exploit code from 1701 to 1476, which is the HSQL port in Version 3.0.8 of JBoss. I can confirm that JBOSS 3.0.8 is also...
JBoss 3.0.8/3.2.1 - HSQLDB Remote Command Injection
source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Because of a number of flaws, an attacker can pass comman...
JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection
JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Becaus...
jboss .jsp source code leakage
By adding 00 то URL it's possible to obtain source code of .jsp page...
JBOSS 3.2.1: JSP source code disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, jboss 3.2.1 with jetty seems to be vulnerable to jsp source code disclosure. Trying to access the ServerInfo.jsp with an suffixed "00" shows the source code of this JSP. Seems to be a forgotten debug feature :-...
