CVE-2001-1084

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-07-02 · updated 2026-06-16

Description

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.

Affected products

Macromedia Jrun: 2.3.3, 3.0

References

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.kb.cert.org/vuls/id/654643
http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full
http://www.osvdb.org/1891
http://www.securityfocus.com/bid/2983
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.kb.cert.org/vuls/id/654643
http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full
http://www.osvdb.org/1891
http://www.securityfocus.com/bid/2983
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793

Get alerted when CVE-2001-1084 or the next vulnerability affects your stack