PDA

Bekijk Volledige Versie : Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP



linlei99@hotmail.com
17/01/08, 17:15
Hello, I inputed the example string from IE and Firefox, but it doesn't work. The Tomcat version is 5.5.23.

It just displayed what I typed.

....
Request URI: /jsp-examples/snp/snoop.jsp;%3Cscript%3Ealert()%3C/script%3Etest.jsp
....

Can anybody help me?

Thanks a lot.