QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-3386

Back to search

CVE-2007-3386

Published: Aug 14, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.

VendorProductVersions

n/a

n/a

affected
n/a

References

36417
vdb-entry
x_refsource_OSVDB
FEDORA-2007-3456
vendor-advisory
x_refsource_FEDORA
27267
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3527
vdb-entry
x_refsource_VUPEN
JVN#59851336
third-party-advisory
x_refsource_JVN
25314
vdb-entry
x_refsource_BID
26465
third-party-advisory
x_refsource_SECUNIA
33668
third-party-advisory
x_refsource_SECUNIA
26898
third-party-advisory
x_refsource_SECUNIA
1018558
vdb-entry
x_refsource_SECTRACK
3010
third-party-advisory
x_refsource_SREASON
ADV-2007-2880
vdb-entry
x_refsource_VUPEN
SSRT071472
vendor-advisory
x_refsource_HP
28317
third-party-advisory
x_refsource_SECUNIA
ADV-2009-0233
vdb-entry
x_refsource_VUPEN
SUSE-SR:2009:004
vendor-advisory
x_refsource_SUSE
RHSA-2007:0871
vendor-advisory
x_refsource_REDHAT
ADV-2007-3386
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:10077
vdb-entry
signature
x_refsource_OVAL
20070814 CVE-2007-3386: XSS in Host Manager
mailing-list
x_refsource_BUGTRAQ
27037
third-party-advisory
x_refsource_SECUNIA
SSRT071447
vendor-advisory
x_refsource_HP
27727
third-party-advisory
x_refsource_SECUNIA
HPSBUX02262
vendor-advisory
x_refsource_HP
HPSBTU02276
vendor-advisory
x_refsource_HP
DSA-1447
vendor-advisory
x_refsource_DEBIAN
MDKSA-2007:241
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now