bugtraq - Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080116224029.16468.qmail@securityfocus.com>
Date: 16 Jan 2008 22:40:29 -0000
From: linlei99@...mail.com
To: bugtraq@...urityfocus.com
Subject: Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP
 examples

Hello, I inputed the example string from IE and Firefox, but it doesn't work. The Tomcat version is 5.5.23. 

It just displayed what I typed.

...
Request URI: /jsp-examples/snp/snoop.jsp;%3Cscript%3Ealert()%3C/script%3Etest.jsp 
...

Can anybody help me?

Thanks a lot.