Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2007-3386 - Vulnerability Database

Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2007-3386

Medium

Reference: CVE-2007-3386

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-3386

Title: Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests as demonstrated using the aliases parameter to an html/add action.