Description

Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field.

Remediation

References

CVE-2002-2347

Related Vulnerabilities

WordPress Plugin SEO Tools 'file' Parameter Directory Traversal (3.1.7)

WordPress Plugin Chop Slider 3 SQL Injection (3.4)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (1.7.2)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3757)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50723)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2002-2347