Description
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.
Remediation
References
Related Vulnerabilities
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3736)
PHP Resource Management Errors Vulnerability (CVE-2010-1917)
WordPress Plugin WP-Table Reloaded Cross-Site Scripting (1.9.3)
WordPress Plugin 0mk Shortener Cross-Site Request Forgery (0.2)
WordPress Plugin Allow REL= and HTML in Author Bios Cross-Site Scripting (.1)