CVE

Id
23300  
CVE No.
CVE-2006-7196  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.  
Phase
Assigned (20070422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
224224 23300 CVE-2006-7196 BUGTRAQ:20070904 Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability  View
224225 23300 CVE-2006-7196 URL:http://www.securityfocus.com/archive/1/archive/1/478491/100/0/threaded  View
224226 23300 CVE-2006-7196 BUGTRAQ:20070905 Re: Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability  View
224227 23300 CVE-2006-7196 URL:http://www.securityfocus.com/archive/1/archive/1/478609/100/0/threaded  View
224228 23300 CVE-2006-7196 BUGTRAQ:20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
224229 23300 CVE-2006-7196 URL:http://www.securityfocus.com/archive/1/archive/1/500412/100/0/threaded  View
224230 23300 CVE-2006-7196 BUGTRAQ:20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
224231 23300 CVE-2006-7196 URL:http://www.securityfocus.com/archive/1/archive/1/500396/100/0/threaded  View
224232 23300 CVE-2006-7196 CONFIRM:http://tomcat.apache.org/security-4.html  View
224233 23300 CVE-2006-7196 CONFIRM:http://tomcat.apache.org/security-5.html  View
224234 23300 CVE-2006-7196 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm  View
224235 23300 CVE-2006-7196 CONFIRM:http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
224236 23300 CVE-2006-7196 CONFIRM:http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
224237 23300 CVE-2006-7196 REDHAT:RHSA-2008:0261  View
224238 23300 CVE-2006-7196 URL:http://www.redhat.com/support/errata/RHSA-2008-0261.html  View
224239 23300 CVE-2006-7196 SUSE:SUSE-SR:2008:005  View
224240 23300 CVE-2006-7196 URL:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html  View
224241 23300 CVE-2006-7196 BID:25531  View
224242 23300 CVE-2006-7196 URL:http://www.securityfocus.com/bid/25531  View
224243 23300 CVE-2006-7196 VUPEN:ADV-2007-1729  View
224244 23300 CVE-2006-7196 URL:http://www.vupen.com/english/advisories/2007/1729  View
224245 23300 CVE-2006-7196 VUPEN:ADV-2009-0233  View
224246 23300 CVE-2006-7196 URL:http://www.vupen.com/english/advisories/2009/0233  View
224247 23300 CVE-2006-7196 OSVDB:34888  View
224248 23300 CVE-2006-7196 URL:http://osvdb.org/34888  View
224249 23300 CVE-2006-7196 SECUNIA:29242  View
224250 23300 CVE-2006-7196 URL:http://secunia.com/advisories/29242  View
224251 23300 CVE-2006-7196 SECUNIA:33668  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51664 JVNDB-2007-000327 IBM WebSphere Application Server における Security コンポーネントに関する脆弱性 IBM WebSphere Application Server (WAS) には、潜在的なセキュリティ上の脆弱性が存在します (PK26123)。本脆弱性の詳細は不明です。 CVE-2006-7198 23300 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000327.html  View