Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

Remediation

References

CVE-2004-2115

Related Vulnerabilities

Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28838)

ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10400)

Internet Information Services Other Vulnerability (CVE-2002-0869)

WordPress Plugin JSON API User Unspecified Vulnerability (3.9.6)

Jenkins Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2017-1000503)

Severity

Medium

Classification

CVE-2004-2115

Tags

Missing Update Known Vulnerabilities