What steps will reproduce the problem? 1. go to bodgeit/advanced.jsp

What is the expected output? What do you see instead?

Not sure but I am guessing not what I get.

backtrack 5r2

Please provide any additional information below.

When I load the advanced search I get this exception report.

type Exception report

message

description The server encountered an internal error () that prevented it from fulfilling this request.

exception

org.apache.jasper.JasperException: Unable to compile class for JSP:

An error occurred at line: 8 in the generated java file Only a type can be imported. com.thebodgeitstore.util.AES resolves to a package

An error occurred at line: 48 in the jsp file: /advanced.jsp AES cannot be resolved to a type 45: String key = ""; 46: String[] params = {}; 47: if (request.getMethod().equals("POST")){ 48: AES enc = new AES(); 49: try { 50: key = session.getAttribute("key").toString(); 51: } catch (Exception e){

What servlet engine are you using?

And did you build bodgeit yourself, or are you using the war file?

Many thanks

I am using the OWASP vulnerable web app distro. I do not have that VM spun up right now but will email you the version tomorrow.

Thanks - I'm pulling the latest version of BWA down now and will see if thats, er, broken :)

:)

The latest version works fine for me.

Can you have a look and see if its also ok for you?

Cheers,

Simon

Comment deleted