mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Thirty of thirty sampled returned 404: the service is gone, so all 942 links across 911 entries are permanently dead. 576 entries held nothing else and drop out of the search index rather than offering a reader a guaranteed miss.
807 B
807 B
CVE-2007-3385
Description
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.
POC
Reference
Github
No PoCs found on GitHub currently.