Apache Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. 

By using the /servlet/ mapping to invoke various servlets / classes it is possible to cause Tomcat to throw an exception, allowing XSS attacks.

The remote web server seems to be vulnerable to cross-site scripting attacks because it fails to sanitize input supplied as a filename when displaying an error page. 

The vulnerability would allow an attacker to make the server present the user with the attacker's JavaScript/HTML code.  Since the content is presented by the server, the user will give it the trust level of the server (for example, the trust level of banks, shopping centers, etc would usually be high).

Older versions of JServ (including the version shipped with Oracle9i App Server v1.0.2) are vulnerable to a cross-site scripting attack using a request for a nonexistent .JSP file.

The script /iissamples/sdk/asp/interaction/Form_JScript.asp (of Form_VBScript.asp) allows you to insert information into a form field and once submitted re-displays the page, printing the text you entered. This .asp doesn't perform any input validation. An attacker can exploit this flaw to execute arbitrary script code in the browser of an unsuspecting victim.

The mod_plsql module supplied with Oracle9iAS allows cross-site scripting attacks to be performed.

The remote host contains an ASP.NET installation that is affected by a cross-site scripting vulnerability. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site.

Two sample CGI's supplied with FastCGI are vulnerable to cross-site scripting attacks. FastCGI is an 'open extension to CGI that provides high performance without the limitations of server specific APIs', and is included in the default installation of the 'Unbreakable' Oracle9i Application Server. Various other web servers support the FastCGI extensions (Zeus, Pi3Web etc).

Two sample CGI's are installed with FastCGI, (echo.exe and echo2.exe under Windows, echo and echo2 under Unix). Both of these CGI's output a list of environment variables and PATH information for various applications. They also display any parameters that were provided to them.

Agora is a CGI-based, e-commerce package. Due to poor input validation, Agora allows an attacker to execute cross-site scripting attacks.

Webalizer, a web server log analysis application, was detected on the remote host.  This version of Webalizer has multiple cross-site scripting vulnerabilities that could allow malicious HTML tags to be injected in the reports.

The remote host is running a web server that fails to adequately sanitize request strings of malicious JavaScript. A remote attacker can exploit this issue, via a specially crafted request, to execute arbitrary HTML and script code in a user's browser within the security context of the affected site.

ID	Name	Severity
11041	Apache Tomcat /servlet Mapping XSS	medium
11010	IBM WebSphere Traversal Error Page XSS	medium
10957	Apache JServ Nonexistent JSP Request XSS	medium
10572	Microsoft IIS 5.0 Form_JScript.asp XSS	medium
10853	Oracle 9iAS mod_plsql Multiple Procedures XSS	medium
10844	Microsoft IIS ASP Redirection Function XSS	medium
10838	FastCGI Multiple Sample CGI XSS	medium
10836	AgoraCart agora.cgi cart_id Parameter XSS	medium
10816	Webalizer < 2.01-09 Multiple XSS	medium
10815	Web Server Generic XSS	medium

Detections

Analytics

CGI abuses : XSS Family for Nessus

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium