Lucene search

K
seebugRootSSV:2130
HistoryAug 17, 2007 - 12:00 a.m.

Apache Tomcat Host Manager Servlet跨站脚本漏洞

2007-08-1700:00:00
Root
www.seebug.org
16

Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。
Apache Tomcat主机管理器Servlet不正确过滤用户提交的数据,远程攻击者可以利用漏洞进行跨站脚本攻击,获得敏感信息。
攻击者可以构建恶意WEB页,诱使用户访问来触发,可获得目标用户敏感信息。

Apache Software Foundation Tomcat 6.0.13
Apache Software Foundation Tomcat 6.0.12
Apache Software Foundation Tomcat 6.0.11
Apache Software Foundation Tomcat 6.0.10
Apache Software Foundation Tomcat 6.0.9
Apache Software Foundation Tomcat 6.0.8
Apache Software Foundation Tomcat 6.0.7
Apache Software Foundation Tomcat 6.0.6
Apache Software Foundation Tomcat 6.0.5
Apache Software Foundation Tomcat 6.0.4
Apache Software Foundation Tomcat 6.0.3
Apache Software Foundation Tomcat 6.0.2
Apache Software Foundation Tomcat 6.0.1
Apache Software Foundation Tomcat 6.0
Apache Software Foundation Tomcat 5.5.24
Apache Software Foundation Tomcat 5.5.23
Apache Software Foundation Tomcat 5.5.22
Apache Software Foundation Tomcat 5.5.21
Apache Software Foundation Tomcat 5.5.20

  • Gentoo Linux 1.4 _rc3
  • Gentoo Linux 1.4 _rc2
  • Gentoo Linux 1.4 _rc1
  • Gentoo Linux 1.2
    Apache Software Foundation Tomcat 5.5.19
    Apache Software Foundation Tomcat 5.5.18
    Apache Software Foundation Tomcat 5.5.17
    Apache Software Foundation Tomcat 5.5.16
    Apache Software Foundation Tomcat 5.5.15
    Apache Software Foundation Tomcat 5.5.14
    Apache Software Foundation Tomcat 5.5.13
    Apache Software Foundation Tomcat 5.5.12
    Apache Software Foundation Tomcat 5.5.11
    Apache Software Foundation Tomcat 5.5.10
    Apache Software Foundation Tomcat 5.5.9
    Apache Software Foundation Tomcat 5.5.8
    Apache Software Foundation Tomcat 5.5.7
    Apache Software Foundation Tomcat 5.5.6
    Apache Software Foundation Tomcat 5.5.5
    Apache Software Foundation Tomcat 5.5.4
    Apache Software Foundation Tomcat 5.5.3
    Apache Software Foundation Tomcat 5.5.2
    Apache Software Foundation Tomcat 5.5.1
    Apache Software Foundation Tomcat 5.5

Apache Software Foundation Tomcat 5.5
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.1
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.10
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.11
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.12
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.13
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.14
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.15
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.16
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.17
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.18
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.19
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.2
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.20
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.21
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.22
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.23
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.24
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.3
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.4
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.5
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.6
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.7
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.8
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 5.5.9
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.1
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.10
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.11
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.12
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.13
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.2
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.3
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.4
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.5
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.6
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.7
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.8
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz
Apache Software Foundation Tomcat 6.0.9
* Apache Software Foundation apache-tomcat-6.0.14.tar.gz
<a href=“http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca” target=“_blank”>http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.14/bin/apache-tomca</a> t-6.0.14.tar.gz


                                                &lt;form action=&quot;http://localhost:8080/host-manager/html/add&quot; method=&quot;get&quot;&gt;
&lt;input type=&quot;hidden&quot; NAME='name' VALUE=&quot;aaa&quot;&gt;
&lt;input type=&quot;hidden&quot;&amp;n