PT-2005-4018 · Oracle · Oracle Xml Db

Alexander Kornbrust · Publicado 2005-10-14 · Atualizado 2017-07-11 · CVE-2005-3204

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle XML DB version 9iR2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request. This could potentially lead to unauthorized actions on the affected system.

Recommendations For Oracle XML DB version 9iR2, update to a version that includes a fix for this issue to prevent remote attackers from injecting malicious scripts.

Exploit

Correção

Identificadores relacionados

CVE-2005-3204

Produtos afetados

Oracle Xml Db

Referências · 12

• 🔥 http://securityfocus.com/bid/15034 · Exploit
• 🔥 https://exploit-db.com/exploits/26332 · Exploit
• http://osvdb.org/20054 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=112870541502542&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3204 · Nota
• http://oracle.com/technology/deploy/security/pdf/cpujul2005.html · Aviso do Fabricante
• http://securityreason.com/securityalert/66 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22541 · Nota
• http://secunia.com/advisories/15991 · Aviso do Fabricante
• http://red-database-security.com/advisory/oracle_xmldb_css.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3204 · Nota de Segurança