CVE-2005-1381

Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.

Affected products

• oracle / application_server_web_cache

Exploits & proofs of concept

• exploit-dbOracle Application Server 9i - Webcache PartialPageErrorPage Cross-Site Scriptingby Alexander Kornbrust
• exploit-dbOracle Application Server 9i - Webcache Cache_dump_file Cross-Site Scriptingby Alexander Kornbrust

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/20309
• MISChttp://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=111472423409560&w=2
• MISChttp://www.securityfocus.com/bid/13421
• MISChttp://www.securityfocus.com/bid/13422
• VENDOR_ADVISORYhttp://secunia.com/advisories/15143
• MISChttp://www.osvdb.org/15910