Description
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.
Remediation
References
Related Vulnerabilities
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4900)
Drupal Other Vulnerability (CVE-2006-2833)
WordPress Plugin Flamingo Code Injection (1.1)
WordPress Plugin BuddyPress Multiple Vulnerabilities (1.9.1)
WordPress Plugin WPBakery Page Builder Cross-Site Scripting (6.4.0)