Description

Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."

Remediation

References

CVE-2009-0781

Related Vulnerabilities

WordPress Plugin 5gig Concerts Unspecified Vulnerability (1.0)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-2271)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13672)

MongoDb Incorrect Authorization Vulnerability (CVE-2020-7921)

WordPress Plugin Chat Cross-Site Scripting (1.0.8)

Severity

Medium

Classification

CVE-2009-0781 CWE-707

Tags

Missing Update Known Vulnerabilities