CVE-2009-4610
Mort Bay Jetty 6.x and 7.0.0 - Cross-Site Scripting via JSP Dump Query String or Session Dump Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4610. PoCs published by Antonion Parata.
AI-analyzed exploit summary This is a detailed advisory describing multiple vulnerabilities in Jetty 6.x and 7.x, including information leaks, XSS, and escape sequence injection. It provides technical analysis and proof-of-concept examples but does not include executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.
Exploits (1)
This is a detailed advisory describing multiple vulnerabilities in Jetty 6.x and 7.x, including information leaks, XSS, and escape sequence injection. It provides technical analysis and proof-of-concept examples but does not include executable exploit code.