Description

Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.

Remediation

References

CVE-2007-1355

Related Vulnerabilities

MySQL CVE-2015-0438 Vulnerability (CVE-2015-0438)

Product Slider for WooCommerce Cross-Site Scripting (2.6.3)

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4900)

OpenSSL Other Vulnerability (CVE-2015-0288)

Ruby on Rails CVE-2013-0277 Vulnerability (CVE-2013-0277)

Severity

Medium

Classification

CVE-2007-1355

Tags

Missing Update Known Vulnerabilities