| Package | Affected versions | Patched versions |
|---|---|---|
| jrun | = 2.3.x |
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free