3431 matches found
CVE-2000-1224
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as 1 "..", 2 "%2e..", 3 "%81", 4 "%82", and others...
CVE-2000-1224
CVE-2000-1224 affects Caucho Technology Resin 1.2 (and possibly earlier). The vulnerability allows remote attackers to view JSP source by requesting a .jsp file with special appended characters in the filename (examples include “..”, “%2e..”, “%81”, “%82”, and others). This indicates a likely imp...
CVE-2000-1224: Undefined Security Weakness
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as 1 "..", 2 "%2e..", 3 "%81", 4 "%82", and others...
CVE-2005-1112: Undefined Security Weakness
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages .jsp via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the...
IBM WebSphere Application Server Malformed Host Header JSP Source Disclosure
It is possible to make the remote web server disclose the source code of its JSP pages by requesting the pages with a nonexistent hostname in the HTTP 'Host' header request when WebSphere Application is sharing the document root of the web server. An attacker may use this flaw to get the source...
IBM WebSphere application server information leak
It's possible to obtain JSP page source code by requesting non-existing virtual host...
IBM WebSphere JSP Source Disclosure / XSS Vulnerabilities
Binary data 2825.prm...
IBM WebSphere Widespread configuration JSP disclosure
IBM WebSphere Widespread configuration JSP disclosure Release Date: 04/13/2005 Severity: High Systems Affected IBM WebSphere Application 6 and prior. Description The practice of sharing the document root of the app server within the document root of the web server creates a security exposure that...
IBM Websphere 5.05.16.0 - Application Server Web Server Root JSP Source Code Disclosure
IBM Websphere 5.05.16.0 - Application Server Web Server Root JSP Source Code Disclosure source: https://www.securityfocus.com/bid/13160/info A remote JSP source disclosure vulnerability reportedly affects the IBM WebSphere Application Server. This issue is due to a failure of the application to...
IBM Websphere 5.0/5.1/6.0 - Application Server Web Server Root JSP Source Code Disclosure
source: https://www.securityfocus.com/bid/13160/info A remote JSP source disclosure vulnerability reportedly affects the IBM WebSphere Application Server. This issue is due to a failure of the application to properly handle various requests under certain circumstances. It should be noted that thi...
CVE-2005-0425
Affected product/versions: IBM WebSphere Application Server 5.0, 5.1, and 6.0 running on Windows. Vulnerability: An information-disclosure flaw where requesting a JSP file with a crafted URL causes the file-serving servlet to process the request instead of the JSP engine, exposing the JSP source ...
IBM WebSphere JSP Engine Source Disclosure
Binary data 2612.prm...
CVE-2004-0280
Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" encoded space character, e.g. index.jsp%20...
CVE-2003-0045
CVE-2003-0045 describes a denial-of-service in Apache Tomcat where requesting a JSP page containing an MS-DOS device name (e.g., aux.jsp) on Windows can cause thread hangs and resource exhaustion. Affected: Tomcat versions prior to 3.3.1a on Windows (notably 3.0–3.3a line). Root cause: the JSP/se...
CVE-2003-0045
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service thread hang and resource consumption via a request for a JSP page containing an MS-DOS device name, such as aux.jsp...
Oracle 9iAS .JSP File Request Default Error Information Disclosure
Binary data 1594.prm...
Apache Tomcat 4.0.x < 4.0.5 / 4.1.x < 4.1.11 JSP Source Code Disclosure
Binary data 1463.pasl...
BEA WebLogic < 5.1 SP 11 JSP Source Disclosure
Binary data 1538.prm...