Description

The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.

Remediation

References

CVE-2004-1877

Related Vulnerabilities

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.1)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-38000)

Oracle JRE CVE-2013-0424 Vulnerability (CVE-2013-0424)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)

SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17305)

Severity

Low

Classification

CVE-2004-1877

Tags

Missing Update Known Vulnerabilities