265 matches found
CVE-2004-2182
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server...
CVE-2002-2186
Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL...
CVE-2002-1855
Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...
CVE-2001-1511
JRun 3.0 and 3.1 running on JRun Web Server JWS and IIS allows remote attackers to read arbitrary JavaServer Pages JSP source code via a request URL containing the source filename ending in 1 "jsp%00" or 2 "js%2570"...
'/./WEB-INF/' Information Disclosure Vulnerability (HTTP)
Various application or web servers / products are prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
'//WEB-INF/' Information Disclosure Vulnerability (HTTP)
Various application or web servers / products are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Allaire JRun Encoded JSP Request Directory Listing
The version of Allaire JRun running on the remote host is affected by an information disclosure vulnerability due to an issue in handling malformed URLs. An unauthenticated, remote attacker can exploit this, via a crafted request, to display a listing of files in arbitrary directories, which may...
Allaire JRun 3.0 Servlet DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2337/info A denial of service condition exists in the JRun web application server. Requesting multiple malformed URLs by way of the java servlet, will cause the JRun application server to stop responding...
Macromedia JRun 4.0 build 61650 Administrative Interface Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9112/info A number of cross-site scripting vulnerabilities have been reported for Macromedia Jrun, specifically in the administrative interface. The problem is said to occur due to insufficient sanitization of URI...
Allaire JRun 2.3 Arbitrary Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1831/info Jrun contains a vulnerability that allows a user to compile and execute JSP code from an arbitrary file on the webserver's filesystem. This bug is due to the way JSP execution is invoked -- if a requested...
Macromedia JRun 3/4 Administrative Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5118/info Macromedia JRun is prone to an issue which may allow remote attackers to bypass the authentication page for the admin server. This may be exploited by adding an extraneous '/' to a request for the administrative...
Allaire JRun 2.3 File Source Code Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1833/info Allaire JRun is a web application development suite with JSP and Java Servlets. JRun contains a vulnerability that allows a user to access documents outside of the webroot. Requesting a malformed URL using the...
Allaire JRun 3 Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes,...
Macromedia JRun 3/4 JSP Engine Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4997/info A vulnerability has been reported in Macromedia JRun for Windows that results in a denial of service condition. The vulnerability occurs when JRun encounters a malicious JSP page. The following snippet of code i...
Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)
A denial of service vulnerability has been found on Adobe ColdFusion. A remote attacker can exploit this vulnerability by sending specially crafted data to a target system. This protection will detect and block attempts to exploit this vulnerability...
Adobe JRun Detection
The remote host has Adobe JRun installed. JRun is an application server for Java applications. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70175; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Adobe...
Adobe JRun 4.0 Multiple Vulnerabilities (APSB09-12)
The remote host has a version of Adobe JRun installed that contains a version of jmc-app.ear that is affected by multiple vulnerabilities : - A directory traversal vulnerability exists in 'logviewer.jsp' in the Management Console that could allow an authenticated, remote attacker to read arbitrar...
Adobe ColdFusion 9/9.0.1/9.0.2 On JRun DoS (APSB13-19) (credentialed check)
The remote Windows host is running a version of ColdFusion that is affected by an unspecified denial of service vulnerability. A remote attacker can exploit this without authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid68929; scriptversion"1.9";...
