CVE-2003-0413

Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.

• http://marc.info/?l=bugtraq&m=105409846029475&w=2
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3AsecurityPatch, Vendor Advisory
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
• http://www.ciac.org/ciac/bulletins/n-103.shtmlPatch, Vendor Advisory
• http://www.iss.net/security_center/static/12095.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/7710Exploit, Patch, Vendor Advisory
• http://www.spidynamics.com/sunone_alert.html
• http://marc.info/?l=bugtraq&m=105409846029475&w=2
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3AsecurityPatch, Vendor Advisory
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
• http://www.ciac.org/ciac/bulletins/n-103.shtmlPatch, Vendor Advisory
• http://www.iss.net/security_center/static/12095.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/7710Exploit, Patch, Vendor Advisory
• http://www.spidynamics.com/sunone_alert.html

Published

Jun 30, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0407Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 a…
• CVE-2003-0408Buffer overflow in Uptime Client (UpClient) 5.0b7, and possi…
• CVE-2003-0409Buffer overflow in BRS WebWeaver 1.04 and earlier allows rem…
• CVE-2003-0410Buffer overflow in AnalogX Proxy 4.13 allows remote attacker…
• CVE-2003-0411Sun ONE Application Server 7.0 for Windows 2000/XP allows re…7.5
• CVE-2003-0412Sun ONE Application Server 7.0 for Windows 2000/XP does not …
• CVE-2003-0414The installation of Sun ONE Application Server 7.0 for Windo…
• CVE-2003-0415Remote PC Access Server 2.2 allows remote attackers to cause…
• CVE-2003-0416Cross-site scripting (XSS) vulnerability in index.cgi for Ba…
• CVE-2003-0417Directory traversal vulnerability in Son hServer 0.2 allows …
• CVE-2003-0418The Linux 2.0 kernel IP stack does not properly calculate th…
• CVE-2003-0419SMC Networks Barricade Wireless Cable/DSL Broadband Router S…