VDB

GCVE-110-CERTCC-2001-981651

GCVE-110-CERTCC-2001-981651
Advisory Published
Vulnetix · Advisory published July 2, 2001
Web servers that use the Resin Java Servlet Container, versions 1.2.3 and earlier, are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or script(JavaScript, VBScript, Java, etc.) in a dynamically generated page based on unvalidated input from untrustworthy sources. This can be a problem when a web server does not adequately ensure that generated pages are properly encoded to prevent unintended execution of scripts, and when input is not validated to prevent malicious HTML from being presented to the user.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population15exploitation0widely_known20score_current59.0625ease_of_exploitation20

Aliases

CVE-2001-0828

References

Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page
url
Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page
url
Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory
Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page
advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›