CVE-2002-1567 in Apache Tomcat
Resumen (Inglés)
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Reservar
2003-09-18
Divulgación
2003-10-06
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 20844 | Apache Tomcat Encoded URL secuencias de comandos en sitios cruzados | 80 | Prueba de concepto | Arreglo oficial | CVE-2002-1567 |