Apache JServ Nonexistent JSP Request XSS

Older versions of JServ including the version shipped with Oracle9i App Server v1.0.2 are vulnerable to a cross-site scripting attack using a request for a nonexistent .JSP file. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details Changes by Tenabl...