Description
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0215)
Oracle Database Server CVE-2007-5504 Vulnerability (CVE-2007-5504)
WordPress Plugin Custom Login Cross-Site Scripting (3.2)
WordPress Plugin CMS Tree Page View Multiple Vulnerabilities (1.4)
Python Resource Management Errors Vulnerability (CVE-2011-1521)