Oracle 9iAS mod_plsql cross site scripting

Summary
The mod_plsql module supplied with Oracle9iAS allows cross site scripting attacks to be performed.
Solution
Patches which address several vulnerabilities in Oracle 9iAS can be downloaded from the oracle Metalink site.
References