Advisory details:
github_osv / GHSA-hc39-rjwp-qffq
| Advisory ID | github_osv/GHSA-hc39-rjwp-qffq |
| Aliases |
CVE-2007-2449
|
| Summary | Apache Tomcat XSS Vulnerabilities in Examples Web Application Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the `;` character, as demonstrated by a URI containing a `snp/snoop.jsp;` sequence. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE |
| Data source | Exploit-DB |
|---|---|
| Date added | June 14, 2007 |
| Description | Apache Tomcat 6.0.13 - JSP Example Web Applications Cross-Site Scripting |
| Ransomware campaign use | Known |
| Source publication date | June 14, 2007 |
| Exploit type | webapps |
| Platform | jsp |
| Source update date | Dec. 10, 2013 |
| Source URL | https://www.securityfocus.com/bid/24476/info |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.