CVE-2001-0828

A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.

• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
• http://www.caucho.com/products/resin/changes.xtpVendor Advisory
• http://www.kb.cert.org/vuls/id/981651US Government Resource
• http://www.osvdb.org/1890
• http://www.securityfocus.com/bid/2981Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
• http://www.caucho.com/products/resin/changes.xtpVendor Advisory
• http://www.kb.cert.org/vuls/id/981651US Government Resource
• http://www.osvdb.org/1890
• http://www.securityfocus.com/bid/2981Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6793

Published

Dec 6, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0822FPF kernel module 1.0 allows a remote attacker to cause a de…
• CVE-2001-0823The pmpost program in Performance Co-Pilot (PCP) before 2.2.…
• CVE-2001-0824Cross-site scripting vulnerability in IBM WebSphere 3.02 and…
• CVE-2001-0825Buffer overflow in internal string handling routines of xine…
• CVE-2001-0826Buffer overflows in CesarFTPD 0.98b allows remote attackers …
• CVE-2001-0827Cerberus FTP server 1.0 - 1.5 allows remote attackers to cau…7.5
• CVE-2001-0829A cross-site scripting vulnerability in Apache Tomcat 3.2.1 …
• CVE-2001-08306tunnel 0.08 and earlier does not properly close sockets tha…7.5
• CVE-2001-0831Unknown vulnerability in Oracle Label Security in Oracle 8.1…
• CVE-2001-0832Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows l…
• CVE-2001-0833Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 all…
• CVE-2001-0834htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier a…