Description
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2007-2110 Vulnerability (CVE-2007-2110)
phpMyFAQ Weak Password Requirements Vulnerability (CVE-2023-0307)
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3221)
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
WebLogic Improper Access Control Vulnerability (CVE-2026-60343)