CVE:CVE-2007-1355
CNNVD:CNNVD-200705-419
Tomcat 的appdev/sample/web/hello.jsp example应用程序中存在多个跨站脚本攻击漏洞。远程攻击者可以借助test参数和其他未明向量，注入任意的web脚本或HTML。
solution:Upgrade apache tomcat to a higher version than 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.1.10,4.1.15,4.1.24,4.1.28,4.1.31,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.6,5.0.7,5.0.8,5.0.9,5.0.10,5.0.11,5.0.12,5.0.13,5.0.14,5.0.15,5.0.16,5.0.17,5.0.18,5.0.19,5.0.21,5.0.22,5.0.23,5.0.24,5.0.25,5.0.26,5.0.27,5.0.28,5.0.29,5.0.30,6.0.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.0.6,6.0.7,6.0.8,6.0.9,6.0.10,and avoid the version 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.1.10,4.1.15,4.1.24,4.1.28,4.1.31,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.6,5.0.7,5.0.8,5.0.9,5.0.10,5.0.11,5.0.12,5.0.13,5.0.14,5.0.15,5.0.16,5.0.17,5.0.18,5.0.19,5.0.21,5.0.22,5.0.23,5.0.24,5.0.25,5.0.26,5.0.27,5.0.28,5.0.29,5.0.30,6.0.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.0.6,6.0.7,6.0.8,6.0.9,6.0.10