Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache Tomcat Other Vulnerability - CVE-2007-2449 - Vulnerability Database
Apache Tomcat

Apache Tomcat Other Vulnerability - CVE-2007-2449

Medium
Reference: CVE-2007-2449
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-2449
Title: Apache Tomcat Other Vulnerability
Overview:

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6 4.1.0 through 4.1.36 5.0.0 through 5.0.30 5.5.0 through 5.5.24 and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the 3939 character as demonstrated by a URI containing a quotsnp/snoop.jspquot sequence.