EDB-26332

functional

Oracle 9 - XML DB Cross-Site Scripting

view exploit source exploit_dbverifiedtype remoteauthor Alexander Kornbrustpublished 2005-10-07catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-3204US	medium4.3	20.7% (98th)	Exploit	2005-10-14
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.