Description

Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."

Remediation

References

CVE-2009-0781

Related Vulnerabilities

MediaWiki Improper Input Validation Vulnerability (CVE-2011-1580)

Liferay DXP Observable Discrepancy Vulnerability (CVE-2024-25146)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-1893)

WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (4.5.0)

Python CVE-2018-1061 Vulnerability (CVE-2018-1061)

Severity

Medium

Classification

CVE-2009-0781 CWE-707

Tags

Missing Update Known Vulnerabilities