-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 tusharvartak@xxxxxxxxxxx wrote: > Apache Tomcat/4.1.31 ships with built in examples. One of the example calendar.jsp suffers from input validation error and could be exploited for cross site scriptingand cross site request forgery. This is CVE-2006-7196 which is fixed in 4.1.32 & 5.5.16. Kind regards, Mark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFG3finb7IeiTPGAkMRApxAAJ9sMCfco8GUEe9LcqbcA+5GE0AKCQCgsEG+ nH4eUojS1ccH9YKtma/GtQU= =3NtA -----END PGP SIGNATURE-----
