Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1947)

Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

Remediation

References

CVE-2008-1947

Related Vulnerabilities

WordPress Plugin Gravity Forms Directory Cross-Site Scripting (3.7.1)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2958)

SharePoint CVE-2022-41122 Vulnerability (CVE-2022-41122)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12823)

Grafana Signature Verification Vulnerability (CVE-2020-27846)

Severity

Medium

Classification

CVE-2008-1947 CWE-707