ByteOS Network

NVD Vulnerability Details :

CVE-2000-1053

Modified

Source-cve@mitre.org

Published At-11 Dec, 2000 | 05:00

Updated At-16 Apr, 2026 | 00:27

Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Macromedia, Inc.

>>jrun>>2.3.x

cpe:2.3:a:macromedia:jrun:2.3.x:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://marc.info/?l=bugtraq&m=97236125107957&w=2	cve@mitre.org	N/A
http://www.allaire.com/handlers/index.cfm?ID=17969&Method=Full	cve@mitre.org	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5406	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=97236125107957&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.allaire.com/handlers/index.cfm?ID=17969&Method=Full	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5406	af854a3a-2127-422b-91ae-364da2661108	N/A