Cves

CVE-2006-7196, CVE-2009-0781

Type

source code

State

bad

Author

The Apache Software Foundation

Status

candidate

Language

Java

Application

cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*

Submission Date

01 Aug 2014

Description

CVE-2006-7196 and CVE-2009-0781

Flaws

• CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Test Suites

• Apache-tomcat 5.5.13