CVE-2005-3202 Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements....
MediumCVSS 6.8
EPSS 11.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle html db | = 1.3 | No fix listed |
| oracle html db | = 1.3.6 | No fix listed |
References
- 20051007 Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB exploit mailing-list vendor-advisory
- 20051007 Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB mailing-list
- 14935 third-party-advisory vendor-advisory
- 62 third-party-advisory
- www.oracle.com exploit vendor-advisory
- 20051 vdb-entry
- 20052 vdb-entry
- www.red-database-security.com vendor-advisory
- 15031 exploit vdb-entry
- oracle-htmldb-xss(22540) vdb-entry