EDB-21895

functional

Jetty 3.1.6/3.1.7/4.1 Servlet Engine - Arbitrary Command Execution

view exploit source exploit_dbverifiedtype webappsauthor Matt Moorepublished 2002-10-02catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2002-1178US	medium5.0	9.46% (95th)	Exploit	2002-10-11
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences i…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.