Description The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails. Remediation References CVE-2002-1630 Related Vulnerabilities Internet Information Services Improper Input Validation Vulnerability (CVE-2000-0258) Select2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10744) Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7830) WordPress Plugin WordPress Slider Block Gutenslider Cross-Site Scripting (5.1.5) WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.13.56) Severity High Classification CVE-2002-1630 Tags Missing Update Known Vulnerabilities