Description

Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".

Remediation

References

CVE-2007-1358

Related Vulnerabilities

MySQL CVE-2019-2755 Vulnerability (CVE-2019-2755)

WordPress Other Vulnerability (CVE-2004-1584)

WordPress Plugin Eventify-Simple Events 'fetcheventdetails.php' SQL Injection (1.7.f)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-28346)

WordPress Plugin WP eCommerce 'cart_messages[]' Parameter Cross-Site Scripting (3.8.6)

Severity

Low

Classification

CVE-2007-1358 CWE-707

Tags

Missing Update Known Vulnerabilities