Description

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

Remediation

References

CVE-2006-7195

Related Vulnerabilities

WordPress Plugin Drop Shadow Boxes Security Bypass (1.7.1)

Oracle JRE CVE-2012-1716 Vulnerability (CVE-2012-1716)

WordPress Plugin W3 Total Cache Information Disclosure (0.9.2.4)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5660)

Moodle Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2023-30943)

Severity

Medium

Classification

CVE-2006-7195

Tags

Missing Update Known Vulnerabilities