3 matches found
CVE-2001-1544
The CVE-2001-1544 entry applies to Macromedia/Allaire JRun Web Server (JWS) versions 2.3.3, 3.0 and 3.1. The vulnerability is a directory traversal via a dot-dot (..) in the HTTP GET request that allows reading arbitrary files on the affected host. Concrete details are supported by connected sour...
5CVSS6.7AI score0.01685EPSS
SaveExploits0References3Affected Software1
JRun Web Server (JWS) GET Request Traversal Arbitrary File Access
This host is running the Allaire JRun web server. Versions 2.3.3, 3.0, and 3.1 are vulnerable to a directory traversal attack. This allows a potential intruder to view the contents of any file on the system. %NASLMINLEVEL 70300 This script was written by H D Moore Script audit and contributions...
5CVSS5.5AI score0.01685EPSS
SaveExploits0References1
20