Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat Manager和Host Manage跨站脚本执行漏洞
Vulnerability Description
Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat的某些应用存在输入验证漏洞，远程攻击者可能利用此漏洞执行跨站脚本执行攻击。 Apache Tomcat的Manager和Host Manager Web应用没有对表单字段参数的输入进行转义，允许通过认证的攻击者通过manager/html/upload的参数名注入任意Web脚本或HTML，执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A