CVE-2007-2450 in Tomcat
Сводка (Английский)
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
02.05.2007
Раскрытие
14.06.2007
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 3133 | Apache Tomcat HTTP межсайтовый скриптинг | 79 | Высокий | Официальное исправление | CVE-2007-2450 |