CVE-2001-0926

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-11-28 · updated 2026-06-16

Description

SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.

Affected products

Macromedia Jrun: 2.3.3, 3.0, 3.1

References

http://marc.info/?l=bugtraq&m=100697797325013&w=2
http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=Full
http://www.securityfocus.com/bid/3589
https://exchange.xforce.ibmcloud.com/vulnerabilities/7622
http://marc.info/?l=bugtraq&m=100697797325013&w=2
http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=Full
http://www.securityfocus.com/bid/3589
https://exchange.xforce.ibmcloud.com/vulnerabilities/7622

Get alerted when CVE-2001-0926 or the next vulnerability affects your stack