CVE-2007-3384

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

Link	Resource
http://tomcat.apache.org/security-3.html
http://www.securityfocus.com/bid/25174	Patch
http://securitytracker.com/id?1018503
http://securityreason.com/securityalert/2971
http://osvdb.org/39035
http://www.securityfocus.com/archive/1/475321/100/0/threaded

Configuration 1

cpe:2.3:a:apache:tomcat:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:apache:tomcat:3.3.1a:*:*:*:*:*:*:* cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*

---

Published : 2007-08-08 01:17

Updated : 2018-10-16 04:48

---

NVD link : CVE-2007-3384

Mitre link : CVE-2007-3384

No products.

NVD-CWE-Other