Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

Remediation

References

CVE-2008-1947

Related Vulnerabilities

MySQL CVE-2016-0610 Vulnerability (CVE-2016-0610)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16687)

Apache Tomcat Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-21733)

PHP Resource Management Errors Vulnerability (CVE-2007-3806)

Ruby on Rails Use of Externally-Controlled Format String Vulnerability (CVE-2013-4389)

Severity

Medium

Classification

CVE-2008-1947 CWE-707

Tags

Missing Update Known Vulnerabilities