Description

Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.

Remediation

References

CVE-2002-1636

Related Vulnerabilities

MySQL CVE-2022-21374 Vulnerability (CVE-2022-21374)

MySQL CVE-2013-5891 Vulnerability (CVE-2013-5891)

Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2017-7536)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21014)

PostgreSQL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-21469)

Severity

Medium

Classification

CVE-2002-1636

Tags

Missing Update Known Vulnerabilities