Record summary

CVE-2000-1053 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.

Description

Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBAllaire JRun 2.3 - Arbitrary Code ExecutionExploitDB exploitby Foundstone LabsNot analyzed1 file
ExploitDB

PoC details

References

4