Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-10-14 10:02
Updated : 2024-02-04 16:52
NVD link : CVE-2005-3202
Mitre link : CVE-2005-3202
CVE.ORG link : CVE-2005-3202
JSON object : View
Products Affected
oracle
- html_db
CWE