Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Macromedia JRun远程JSP源代码泄露漏洞
Vulnerability Description
Macromedia JRun是一款Macromedia公司开发的Java 应用服务器，提供快速可靠的J2EE兼容平台。 Macromedia JRun对用户提交的请求缺少正确检查，远程攻击者可以利用这个漏洞获得.JSP文件源代码信息。 Macromedia JRun在处理字符串后的NULL字符存在问题，攻击者可以通过提交在.JSP文件后追加NULL字符的请求，可导致服务器返回JSP源代码信息，造成敏感信息泄露。攻击者可以利用此漏洞进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A