CVE-2007-3384

Description

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

References

http://www.securityfocus.com/bid/25174

http://www.securityfocus.com/archive/1/475321/100/0/threaded

http://tomcat.apache.org/security-3.html

http://securitytracker.com/id?1018503

http://securityreason.com/securityalert/2971

http://osvdb.org/39035

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3