Vulnerabilities > CVE-2004-2115 - Unspecified vulnerability in Oracle Http Server 8.1.7/9.0.1/9.2.0

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
oracle
exploit available
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

Vulnerable Configurations

Part Description Count
Application
Oracle
3

Exploit-Db

descriptionOracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability. CVE-2004-2115 . Remote exploits for multiple platform
idEDB-ID:23593
last seen2016-02-02
modified2004-01-24
published2004-01-24
reporterRafel Ivgi The-Insider
sourcehttps://www.exploit-db.com/download/23593/
titleOracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability

References