EDB-50119
PoCApache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS)
view exploit source exploit_dbtype webappsauthor Central InfoSecpublished 2021-07-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-0221US | medium6.1 | Exploit | ||
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS.… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan