Description
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
Remediation
References
Related Vulnerabilities
WordPress Plugin Twenty20 Image Before-After Malicious Code (1.6.3)
WordPress Plugin Aviary Image Editor Add-on For Gravity Forms Arbitrary File Upload (3.0)
WordPress Plugin Under Construction Open Redirect (3.20)
WordPress Plugin Job Board by BestWebSoft Cross-Site Scripting (1.0.0)
WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Request Forgery (4.7.5)