Unauthorizaed Apache Tomcat JSP source code disclosure

org.apache.catalina.servlets.DefaultServ let allows to access any JSP code...

Allaire JRun 2.3 - Arbitrary Code Execution

source: https://www.securityfocus.com/bid/1831/info Jrun contains a vulnerability that allows a user to compile and execute JSP code from an arbitrary file on the webserver's filesystem. This bug is due to the way JSP execution is invoked -- if a requested filename/path is prefixed with...

CVE-2000-0684

BEA WebLogic 5.1.x is affected by an access restriction flaw in the JSPServlet. The vulnerability allows remote attackers to compile and execute Java JSP code by directly invoking the JSPServlet on any source file, enabling complete confidentiality and integrity compromise as described by the CVS...