Description

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

Remediation

References

CVE-2006-7195

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4986)

WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Cross-Site Scripting (3.2.12)

Moodle Improper Input Validation Vulnerability (CVE-2018-1137)

WordPress Plugin Ultimate GDPR & CCPA Compliance Toolkit for WordPress Security Bypass (2.4)

Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-39275)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-7195