CVE-2002-0682
published 2002-07-23CVE-2002-0682: Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/…
PriorityP428high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
12.24%
95.7th percentile
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect XSS exploitation attempts against Apache Tomcat 4.0.3 by monitoring HTTP requests containing the /servlet/ path mapping combined with script payloads (e.g., alert(...)) appended after a fully-qualified class name. These requests exploit exception-throwing behavior to reflect unsanitized input. ↗
- →Flag HTTP requests matching the pattern: /servlet/<org.apache.catalina.*>/<script_payload> — the class name segment triggers an exception and the trailing payload is reflected unfiltered in the response. ↗
- ·The vulnerability is specific to Apache Tomcat version 4.0.3 on both Microsoft Windows and Linux platforms. Servlet mapping must be enabled for the attack surface to exist. ↗
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation
exploitdb·2004-07-07
CVE-2004-0682 Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation
Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation
---
source: https://www.securityfocus.com/bid/10674/info
Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order.
Comersus Cart version 5.09 is affected by these issues, however, other versions may be prone to these vulnerabilities as well.
http://www.example.com/comersus/store/comersus_gatewayPayPal.asp?idOrder=2002&OrderTotal=|102|222|228|22|130|36|209&name=Thomas&lastName=Ryan&address=123+Easy+Modify+Street&city=New+York&state=NY&zip=10001&country=US&phone=212%2D857%2D1731&email=tommy%40providesecurity%2Ecom&orderDetails=1x+%23RDHT%2F11+Red+Hat+Delux
Exploit-DB
Apache Tomcat 4.0.3 - Servlet Mapping Cross-Site Scripting
exploitdb·2002-07-10
CVE-2002-0682 Apache Tomcat 4.0.3 - Servlet Mapping Cross-Site Scripting
Apache Tomcat 4.0.3 - Servlet Mapping Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/5193/info
A vulnerability has been reported for Apache Tomcat 4.0.3 on Microsoft Windows and Linux platforms. Reportedly, it is possible for an attacker to launch a cross site scripting attack.
When servlet mapping is enabled, it is possible to invoke various servlets and classes and cause Apache Tomcat to throw an exception. This will make cross site scripting attacks possible.
tomcat-server/servlet/org.apache.catalina.servlets.WebdavStatus/alert(document.domain)
tomcat-server/servlet/org.apache.catalina.ContainerServlet/alert(document.domain)
tomcat-server/servlet/org.apache.catalina.Context/alert(document.domain)
tomcat-server/servlet/org.apache.catalina.Globals/alert(document.d
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.htmlhttp://marc.info/?l=bugtraq&m=102631703811297&w=2http://www.osvdb.org/4973http://www.securityfocus.com/bid/5193https://exchange.xforce.ibmcloud.com/vulnerabilities/9520https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3Ehttp://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.htmlhttp://marc.info/?l=bugtraq&m=102631703811297&w=2http://www.osvdb.org/4973http://www.securityfocus.com/bid/5193https://exchange.xforce.ibmcloud.com/vulnerabilities/9520https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
2002-07-23
Published