Secunia Logo
 
CVE Reference: CVE-2005-3204
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-3204

Description:
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/22541

SREASON
  http://securityreason.com/securityalert/66

SAID
  Secunia Advisory: SA15991

OSVDB
  20054

MISC
  http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
  http://www.red-database-security.com/advisory/oracle_xmldb_css.html

FULLDISC
  http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html

BUGTRAQ
  http://marc.theaimsgroup.com/?l=bugtraq&m=112870541502542&w=2

BID
  15034


Return to the previous page.