Vulnerability record · CVE-2003-1513 · published 31 December 2003

CVE-2003-1513: Caucho technology resin cross-site scripting vulnerability

Caucho Technology · Resin

Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.

4.3 CVSS 2.0 Medium EPSS 1.5% · top 27.4% CWE-79 · Cross-site scripting

4.3CVSS 2.0 base score

1.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Resin Caucho Technology

References

Link	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html	Exploit
http://secunia.com/advisories/10031	Vendor Advisory
http://www.securityfocus.com/bid/8852	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/13460
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html	Exploit
http://secunia.com/advisories/10031	Vendor Advisory
http://www.securityfocus.com/bid/8852	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/13460

Track CVE-2003-1513 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.4CVE-2007-2439Caucho technology resin vulnerabilityCaucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and…EPSS 2.3%16 May 2007 7.8CVE-2006-1953Caucho technology resin vulnerabilityDirectory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encode…EPSS 2.7%17 May 2006 5.1CVE-2001-0828Caucho technology resin vulnerabilityA cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that end…EPSS 2.5%6 Dec 2001 5.0CVE-2007-2441Caucho technology resin vulnerabilityCaucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs ass…EPSS 3.3%16 May 2007 5.0CVE-2007-2440Caucho technology resin vulnerabilityDirectory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read c…EPSS 3.6%16 May 2007 5.0CVE-2006-2437Caucho technology resin vulnerabilityThe viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code fo…EPSS 6.8%17 May 2006 5.0CVE-2006-2438Caucho technology resin vulnerabilityDirectory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote a…EPSS 2.4%17 May 2006 5.0CVE-2004-0280Caucho technology resin vulnerabilityCaucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space char…EPSS 1.5%23 Nov 2004

Source: NIST National Vulnerability Database (record CVE-2003-1513), CISA KEV, FIRST EPSS (scores of 2026-10-08). This page is refreshed as NVD updates the record.