Description

Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.

Remediation

References

CVE-2002-1636

Related Vulnerabilities

SharePoint CVE-2023-21742 Vulnerability (CVE-2023-21742)

MySQL CVE-2015-4769 Vulnerability (CVE-2015-4769)

MySQL CVE-2022-39404 Vulnerability (CVE-2022-39404)

Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-25608)

WordPress Plugin Sketchus Pricing Tables Unspecified Vulnerability (2.0)

Severity

Medium

Classification

CVE-2002-1636

Tags

Missing Update Known Vulnerabilities