Vulnerabilities > Macromedia > Jrun > 2.3.3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-11-29 | CVE-2002-1310 | Buffer Overrun vulnerability in Macromedia JRun IIS ISAPI Filter GET Request Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name. | 7.5 |
| 2001-12-31 | CVE-2001-1544 | Directory Traversal vulnerability in Macromedia Jrun 2.3.3/3.0/3.1 Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. | 5.0 |
| 2001-12-31 | CVE-2001-1510 | Unspecified vulnerability in Macromedia Jrun 2.3.3/3.0/3.1 Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL. | 5.0 |
| 2001-11-28 | CVE-2001-0926 | Unspecified vulnerability in Macromedia Jrun 2.3.3/3.0/3.1 SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement. | 5.0 |
| 2001-07-02 | CVE-2001-1084 | Cross-Site Scripting vulnerability in Macromedia Jrun 2.3.3/3.0 Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message. | 7.5 |