Description

Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563.

Remediation

References

CVE-2007-1609

Related Vulnerabilities

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Security Bypass (4.2.12)

WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Cross-Site Scripting (5.0.6)

Jboss EAP CVE-2012-4529 Vulnerability (CVE-2012-4529)

Joomla Other Vulnerability (CVE-2006-1029)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11047)

Severity

Medium

Classification

CVE-2007-1609

Tags

Missing Update Known Vulnerabilities