Most recent entries from all

certa-2007-avi-267 — Une vulnérabilité dans les applications d'administration de Tomcat et dans des exemples d'a…

certa-2007-avi-267

EUVD-2026-134481

fkie_cve-2007-2449

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.

GHSA-hc39-rjwp-qffq — Apache Tomcat XSS Vulnerabilities in Examples Web Application

Affected: Maven: org.apache.tomcat:tomcat

Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the `;` character, as demonstrated by a URI containing a `snp/snoop.jsp;` sequence.

gsd-2007-2449

jvndb-2007-000456

Apache Tomcat, from the Apache Software Foundation, contains a cross-site scripting vulnerability in its sample program. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page (JSP) technologies. jsp-examples, a sample web application included in Apache Tomcat, contains a cross-site scripting vulnerability.

RHSA-2007:0569 — Red Hat Security Advisory: tomcat security update

tomcat examples jsp XSS tomcat host manager XSS