← Database

CVE-2001-1510

MEDIUM CVSS: 5.0 Published: 2001-12-31 Modified: 2026-06-16

Description

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.

Affected Platforms

Macromedia Jrun

Weakness Type

NVD-CWE-Other

References