CVE-2003-1513: XSS

Published Dec 31, 2003

Updated

Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.

Affected Software

4 affected components

Caucho Technology Resin=2.1.2

Caucho Technology Resin=2.1.1

Caucho Technology Resin=2.0

Caucho Technology Resin=2.1.12

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityWeaknessAffected Software

Oct 25, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1513?

CVE-2003-1513 is classified as a medium severity vulnerability due to potential exploitation via cross-site scripting attacks.

How do I fix CVE-2003-1513?

To fix CVE-2003-1513, upgrade to a later version of Caucho Resin that addresses these XSS issues.

Which versions of Caucho Resin are affected by CVE-2003-1513?

CVE-2003-1513 affects Caucho Resin versions 2.0, 2.1.1, 2.1.2, and 2.1.12.

What types of attacks can exploit CVE-2003-1513?

CVE-2003-1513 can be exploited through cross-site scripting (XSS) to inject arbitrary web scripts or HTML.

Is CVE-2003-1513 still a concern for modern web applications?

While CVE-2003-1513 was reported in 2003, it is crucial to ensure that any legacy systems using the affected versions are updated to prevent potential exploitation.