Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Allaire JRun JSP源代码泄露漏洞
Vulnerability Description
Allaire JRun是JSP和Java Servlet的Web应用程序开发套件,每个Web应用程序目录都存在一个"WEB-INF"或"META-INF"目录,这些目录通常包含Web应用程序类文件,预编译的JSP文件,服务端的库文件,Session信息或者"web.xml"和"webapp.properties"等配置信息。 该软件存在一个输入验证漏洞,可能导致JSP文件源代码泄露。 通过发送一个精心构造的请求,远程攻击者可能获得任何目录下的JSP文件源码。
CVSS Information
N/A
Vulnerability Type
N/A