CVE-2005-3747
Jetty < 5.1.6 - Unauthenticated Source Code Exposure via URL-Encoded Backslash
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3747.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Promise WebPAM v2.2.0.13, including SQL injection via 'entSortOrder' and 'entSort' parameters, XSS via 'startTime' and 'endTime', HTTP Response Splitting via 'userID', and Source Code Disclosure via null byte injection. The PoC provides direct URLs to trigger these vulnerabilities.
Description
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in Promise WebPAM v2.2.0.13, including SQL injection via 'entSortOrder' and 'entSort' parameters, XSS via 'startTime' and 'endTime', HTTP Response Splitting via 'userID', and Source Code Disclosure via null byte injection. The PoC provides direct URLs to trigger these vulnerabilities.