Macromedia: >> Jrun >> 2.3.x Security Vulnerabilities
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
CVSS Score
5.0
EPSS Score
0.01
Published
2000-12-11
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
CVSS Score
5.0
EPSS Score
0.006
Published
2000-12-11
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
CVSS Score
10.0
EPSS Score
0.088
Published
2000-12-11