Find real vulnerabilities before they ship
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
| Base Score | 10 |
|---|---|
| Vector String | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |
