BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability Sep 05 2007 12:30AM
Mark Thomas (markt apache org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

tusharvartak (at) hotmail (dot) com [email concealed] wrote:
> Apache Tomcat/4.1.31 ships with built in examples. One of the example calendar.jsp suffers from input validation error and could be exploited for cross site scriptingand cross site request forgery.

This is CVE-2006-719...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus