SecuritySpace - CVE-2009-2696

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2009-2696

Description: Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." NOTE: this is due to a missing fix for CVE-2009-0781.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2009-2696
RedHat Security Advisories: RHSA-2010:0580
http://www.redhat.com/support/errata/RHSA-2010-0580.html
http://secunia.com/advisories/40813
http://www.vupen.com/english/advisories/2010/1986

CVE ID:	CVE-2009-2696
Description:	Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." NOTE: this is due to a missing fix for CVE-2009-0781.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2696 RedHat Security Advisories: RHSA-2010:0580 http://www.redhat.com/support/errata/RHSA-2010-0580.html http://secunia.com/advisories/40813 http://www.vupen.com/english/advisories/2010/1986