CVE ID:	CVE-2006-7196
Description:	Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-7196 20070904 Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability http://www.securityfocus.com/archive/1/478491/100/0/threaded 20070905 Re: Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability http://www.securityfocus.com/archive/1/478609/100/0/threaded 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities http://www.securityfocus.com/archive/1/500396/100/0/threaded 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) http://www.securityfocus.com/archive/1/500412/100/0/threaded 25531 http://www.securityfocus.com/bid/25531 29242 http://secunia.com/advisories/29242 33668 http://secunia.com/advisories/33668 34888 http://osvdb.org/34888 ADV-2007-1729 http://www.vupen.com/english/advisories/2007/1729 ADV-2009-0233 http://www.vupen.com/english/advisories/2009/0233 RHSA-2008:0261 http://www.redhat.com/support/errata/RHSA-2008-0261.html SUSE-SR:2008:005 http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-5.html