Vulnerabilities of Apache Commons HttpClient
Apache Commons HttpClient vulnerability: parameter injection with addRequestHeader
When an attacker can control the parameter of the addRequestHeader() method of Apache HttpClient, he can insert additional HTTP headers.

Apache Commons HttpClient vulnerability: incomplete certificate validation
An attacker can use any valid certificate on a malicious server, and then invite an Apache HttpClient 3 to connect there, in order to spy communications even if encryption is used.

Apache Commons HttpClient vulnerability: obtaining proxy password
When HttpClient connects to a proxy requiring an authentication, the login and password are sent to the remote server.

Display other vulnerabilities of Apache Commons HttpClient described by Vigil@nce...

Display information about Apache Commons HttpClient:

• http://hc.apache.org/httpcomponents-client-ga/index.html