caucho technology resin vulnerabilities and exploits

(subscribe to this query)

435

VMScore

Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 up to and including 2.1.2 allow remote malicious users to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe....

Caucho Technology Resin 2.1.1 Caucho Technology Resin 2.1.12 Caucho Technology Resin 2.1.2 Caucho Technology Resin 2.0

1 EDB exploit

445

VMScore

Resin 2.0.5 up to and including 2.1.2 allows remote malicious users to reveal physical path information via a URL request for the example Java class file HelloServlet.

Caucho Technology Resin 2.1.2 Caucho Technology Resin 2.0 Caucho Technology Resin 2.1.1

454

VMScore

A cross-site scripting vulnerability in Caucho Technology Resin prior to 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.

Caucho Technology Resin 1.2.2 Caucho Technology Resin

694

VMScore

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote malicious users to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.

Caucho Technology Resin 3.0.17 Caucho Technology Resin 3.0.18

505

VMScore

Caucho Technology Resin 1.2 and possibly earlier allows remote malicious users to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and...

Caucho Technology Resin 1.1.5 Caucho Technology Resin 1.2

1 EDB exploit

505

VMScore

The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote malicious users to obtain the source code for file under the web root via the file parameter.

Caucho Technology Resin 3.0.18 Caucho Technology Resin 3.0.17

1 EDB exploit

445

VMScore

Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote malicious users to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant ...

Caucho Technology Resin 3.0.17 Caucho Technology Resin 3.0.18

445

VMScore

Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote malicious users to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.

Caucho Technology Resin 2.1.2 Caucho Technology Resin 2.1.1

505

VMScore

Caucho Resin 1.3b1 and previous versions allows remote malicious users to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.

Caucho Technology Resin 1.3 Caucho Technology Resin 1.2

1 EDB exploit

837

VMScore

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and previous versions for Windows allows remote malicious users to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.

Caucho Technology Resin

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook