Vulnerability Database

308,820

Total vulnerabilities in the database

CVE-2003-1511

Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.

Published: Dec 31, 2003
Updated: Nov 9, 2025
CVE: CVE-2003-1511
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
bajie / java_http_server	0.95-zxv4	0.95-zxv4.x
bajie / java_http_server	0.95	0.95.x
bajie / java_http_server	0.95-d	0.95-d.x
bajie / java_http_server	0.95-zxc	0.95-zxc.x
bajie / java_http_server	0.95-zxe1	0.95-zxe1.x
bajie / java_http_server	0.95-zxe	0.95-zxe.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo