Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

Remediation

References

CVE-2008-1947

Related Vulnerabilities

PHP CVE-2013-7345 Vulnerability (CVE-2013-7345)

Joomla Improper Certificate Validation Vulnerability (CVE-2017-11364)

WordPress Plugin Ultimate Instagram Feed Cross-Site Scripting (1.2)

Sqlite CVE-2021-36690 Vulnerability (CVE-2021-36690)

Nginx Improper Certificate Validation Vulnerability (CVE-2021-3618)

Severity

Medium

Classification

CVE-2008-1947 CWE-707

Tags

Missing Update Known Vulnerabilities