CVE-2003-1513

Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.

Published: Dec 31, 2003
Updated: Nov 9, 2025
CVE: CVE-2003-1513
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
caucho_technology / resin	2.1.2	2.1.2.x
caucho_technology / resin	2.1.1	2.1.1.x
caucho_technology / resin	2.0	2.0.x
caucho_technology / resin	2.1.12	2.1.12.x

http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html
http://secunia.com/advisories/10031
http://www.securityfocus.com/bid/8852
https://exchange.xforce.ibmcloud.com/vulnerabilities/13460

Vulnerability Database

CVE-2003-1513

Deep Security Visibility Without the Complexity