20031019 Caucho Resin 2.x - Cross Site Scriptingmailing list
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html CVE-2003-1513
Caucho Resin 2.0/2.1 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
Record summary
CVE-2003-1513 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCaucho Resin 2.0/2.1 - Multiple HTML Injection / Cross-Site Scripting VulnerabilitiesExploitDB exploitby Donnie WernerNot analyzed1 file
References
510031Third-party advisory
http://secunia.com/advisories/10031 8852vdb entry
http://www.securityfocus.com/bid/8852 resin-name-comment-xss(13460)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13460 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1513