CVE

Id
12587  
CVE No.
CVE-2005-1381  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.  
Phase
Assigned (20050502)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
90567 12587 CVE-2005-1381 BUGTRAQ:20050428 Cross Site Scripting in Oracle Webcache 9i Adminstrator Application  View
90568 12587 CVE-2005-1381 URL:http://marc.info/?l=bugtraq&m=111472423409560&w=2  View
90569 12587 CVE-2005-1381 MISC:http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html  View
90570 12587 CVE-2005-1381 BID:13421  View
90571 12587 CVE-2005-1381 URL:http://www.securityfocus.com/bid/13421  View
90572 12587 CVE-2005-1381 BID:13422  View
90573 12587 CVE-2005-1381 URL:http://www.securityfocus.com/bid/13422  View
90574 12587 CVE-2005-1381 OSVDB:15910  View
90575 12587 CVE-2005-1381 URL:http://www.osvdb.org/15910  View
90576 12587 CVE-2005-1381 SECUNIA:15143  View
90577 12587 CVE-2005-1381 URL:http://secunia.com/advisories/15143  View
90578 12587 CVE-2005-1381 XF:oracle9ias-application-cache-xss(20309)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62120 JVNDB-2005-000322 Oracle Application Server の Oracle HTTP Server におけるアクセス制御を回避される脆弱性 Oracle Application Server に含まれる Oracle HTTP Server (OHS) には、OHS モジュール mod_access を使用して特定の URL にアクセス制限を設けている場合に、Web Cache を介して本来アクセスが制限されている URL にアクセス可能である脆弱性が存在します。 CVE-2005-1383 12587 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000322.html  View