Bugtraq mailing list archives

Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples


From: linlei99 () hotmail com
Date: 16 Jan 2008 22:40:29 -0000

Hello, I inputed the example string from IE and Firefox, but it doesn't work. The Tomcat version is 5.5.23. 

It just displayed what I typed.

...
Request URI: /jsp-examples/snp/snoop.jsp;%3Cscript%3Ealert()%3C/script%3Etest.jsp 
...

Can anybody help me?

Thanks a lot.


Current thread: