Description

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

Remediation

References

CVE-2007-3384

Related Vulnerabilities

WordPress Plugin WordPress WP-Advanced-Search SQL Injection (3.3.5)

IBM WebSEAL Session Fixation Vulnerability (CVE-2019-4152)

MySQL CVE-2014-6489 Vulnerability (CVE-2014-6489)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12649)

Ruby on Rails Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-22885)

Severity

Medium

Classification

CVE-2007-3384

Tags

Missing Update Known Vulnerabilities