[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2005-3205Date: (C)2005-10-14   (M)2023-12-22


Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.5
Exploit Score: 6.8
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
BID-15030
SECUNIA-15991
http://marc.info/?l=bugtraq&m=112870489324437&w=2
SREASON-63
http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
http://www.red-database-security.com/advisory/oracle_isqlplus_css.html
oracle-isqlplus-xss(22539)

CPE    1
cpe:/a:oracle:database_server:9.0.2.4:r2
CWE    1
CWE-79

© SecPod Technologies