Description

Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

Remediation

References

CVE-2007-4724

Related Vulnerabilities

WordPress Plugin Multiplayer Games Cross-Site Scripting (3.7)

WordPress Plugin WP Sitemap Page Cross-Site Scripting (1.6.4)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6365)

Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-0994)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42117)

Severity

Medium

Classification

CVE-2007-4724 CWE-352

Tags

Missing Update Known Vulnerabilities