NVD

Id
65739  
Name
CVE-2006-7196  
Description
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-05-09  
Modified Date
2011-03-07  
Seq
2006-7196  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342325 65739 CVE-2006-7196 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
342326 65739 CVE-2006-7196 SUSE-SR:2008:005  View
342327 65739 CVE-2006-7196 http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm  View
342328 65739 CVE-2006-7196 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
342329 65739 CVE-2006-7196 http://tomcat.apache.org/security-4.html  View
342330 65739 CVE-2006-7196 http://tomcat.apache.org/security-5.html  View
342331 65739 CVE-2006-7196 RHSA-2008:0261  View
342332 65739 CVE-2006-7196 20070904 Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability  View
342333 65739 CVE-2006-7196 20070905 Re: Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability  View
342334 65739 CVE-2006-7196 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
342335 65739 CVE-2006-7196 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
342336 65739 CVE-2006-7196 25531  View
342337 65739 CVE-2006-7196 ADV-2007-1729  View
342338 65739 CVE-2006-7196 ADV-2009-0233  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51660 JVNDB-2007-000323 Apache Tomcat の calendar サンプルアプリケーションにおけるクロスサイトスクリプティングの脆弱性 Apache Tomcat の JSP サンプルアプリケーションの一部として含まれる calendar アプリケーションには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-7196 23298 CVE-2006-7196 65739 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000323.html 2007-05-09 2007-12-10 View