Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:01
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html - Vendor Advisory | |
References | () http://marc.info/?l=bugtraq&m=112870541502542&w=2 - | |
References | () http://secunia.com/advisories/15991/ - Patch, Vendor Advisory | |
References | () http://securityreason.com/securityalert/66 - | |
References | () http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - Vendor Advisory | |
References | () http://www.osvdb.org/20054 - | |
References | () http://www.red-database-security.com/advisory/oracle_xmldb_css.html - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/15034 - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/22541 - |
Information
Published : 2005-10-14 10:02
Updated : 2024-11-21 00:01
NVD link : CVE-2005-3204
Mitre link : CVE-2005-3204
CVE.ORG link : CVE-2005-3204
JSON object : View
Products Affected
oracle
- oracle9i
- application_server
CWE