Fixed in Apache Tomcat 5.5.21, 5.0.SVN

Low: Cross-site scripting CVE-2007-1358 Web pages that display the Accept-Language header value sent by the client are susceptible to a cross-site scripting attack if they assume the Accept-Language header value conforms to RFC 2616. Under normal circumstances this would not be possible to exploi...

CVE-2006-2616

SQL injection vulnerability in the search script in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter...

CVE-2006-2616

The CVE-2006-2616 entry describes an SQL injection in the search script of AlstraSoft Web Host Directory 1.2 (also listed as HyperStop WebHost Directory 1.2). The vulnerability allows remote attackers to execute arbitrary SQL commands via the uri parameter, enabling potential data exposure or mod...

CVE-2004-2616

The CVE-2004-2616 entry concerns the file server in ActivePost Standard 3.1 and earlier. Affected software : ActivePost Standard (versions up to 3.1). Vulnerability : remote authenticated users can upload a file and obtain sensitive information; a success message reveals the path, indicating info...

CVE-2005-2616

CVE-2005-2616 concerns ezUpload version 2.2 where multiple PHP files (initialize.php, customize.php, form.php, index.php) are vulnerable to improper handling of the path parameter used for including PHP code. The underlying issue enables remote attackers to cause arbitrary code execution by manip...