Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.spidynamics.com/sunone_alert.html | x_refsource_MISC |
| http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity | vendor-advisory x_refsource_SUNALERT |
| http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1 | vendor-advisory x_refsource_SUNALERT |
| http://www.iss.net/security_center/static/12095.php | vdb-entry x_refsource_XF |
| http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605 | vendor-advisory x_refsource_SUNALERT |
| http://www.ciac.org/ciac/bulletins/n-103.shtml | third-party-advisory government-resource x_refsource_CIAC |
| http://marc.info/?l=bugtraq&m=105409846029475&w=2 | mailing-list x_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/7710 | vdb-entry x_refsource_BID |
| http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 | vendor-advisory x_refsource_SUNALERT |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.spidynamics.com/sunone_alert.html | x_refsource_MISC x_transferred |
| http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity | vendor-advisory x_refsource_SUNALERT x_transferred |
| http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1 | vendor-advisory x_refsource_SUNALERT x_transferred |
| http://www.iss.net/security_center/static/12095.php | vdb-entry x_refsource_XF x_transferred |
| http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605 | vendor-advisory x_refsource_SUNALERT x_transferred |
| http://www.ciac.org/ciac/bulletins/n-103.shtml | third-party-advisory government-resource x_refsource_CIAC x_transferred |
| http://marc.info/?l=bugtraq&m=105409846029475&w=2 | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.securityfocus.com/bid/7710 | vdb-entry x_refsource_BID x_transferred |
| http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 | vendor-advisory x_refsource_SUNALERT x_transferred |