CVE-2003-1513

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.

Affected products

Caucho Technology Resin: 2.0, 2.1.1, 2.1.2, 2.1.12

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html
http://secunia.com/advisories/10031
http://www.securityfocus.com/bid/8852
https://exchange.xforce.ibmcloud.com/vulnerabilities/13460
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html
http://secunia.com/advisories/10031
http://www.securityfocus.com/bid/8852
https://exchange.xforce.ibmcloud.com/vulnerabilities/13460

Get alerted when CVE-2003-1513 or the next vulnerability affects your stack