Vulnerabilities > CVE-2004-2115 - Cross-Site Scripting vulnerability in Oracle Http Server 8.1.7/9.0.1/9.2.0

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
oracle
exploit available
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

Vulnerable Configurations

Part Description Count
Application
Oracle
3

Exploit-Db

descriptionOracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability. CVE-2004-2115 . Remote exploits for multiple platform
idEDB-ID:23593
last seen2016-02-02
modified2004-01-24
published2004-01-24
reporterRafel Ivgi The-Insider
sourcehttps://www.exploit-db.com/download/23593/
titleOracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability

References