[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
- From: linlei99@xxxxxxxxxxx
- Date: 16 Jan 2008 22:40:29 -0000
Hello, I inputed the example string from IE and Firefox, but it doesn't work.
The Tomcat version is 5.5.23.
It just displayed what I typed.
...
Request URI:
/jsp-examples/snp/snoop.jsp;%3Cscript%3Ealert()%3C/script%3Etest.jsp
...
Can anybody help me?
Thanks a lot.