Description

Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.

Remediation

References

CVE-2002-1636

Related Vulnerabilities

RubyGems Improper Input Validation Vulnerability (CVE-2017-0901)

IBM RTC Cross-site Scripting (XSS) Vulnerability (CVE-2020-4697)

WordPress Plugin Page Builder by SiteOrigin Cross-Site Scripting (2.0.4)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21365)

Mailman Other Vulnerability (CVE-2004-0412)

Severity

Medium

Classification

CVE-2002-1636

Tags

Missing Update Known Vulnerabilities