Description

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

Remediation

References

CVE-2006-7195

Related Vulnerabilities

Dolibarr Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-30253)

Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35210)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-44040)

WordPress Plugin VaultPress Unspecified Vulnerability (1.7.1)

WordPress Plugin Limit Attempts by BestWebSoft Multiple Vulnerabilities (1.0.3)

Severity

Medium

Classification

CVE-2006-7195

Tags

Missing Update Known Vulnerabilities