Total vulnerabilities in the database
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
CVSS v2:
No CWE or OWASP classifications available.