EDB-30496
functionalApache Tomcat 6.0.13 - Insecure Cookie Handling Quote Delimiter Session ID Disclosure
view exploit source exploit_dbverifiedtype remoteauthor Tomasz Kuczynskipublished 2007-08-14catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-3382US | medium4.3 | Exploit | ||
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan