Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.

Remediation

References

CVE-2004-2115

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6378)

MySQL Other Vulnerability (CVE-2005-0710)

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-15098)

WordPress Plugin Download Monitor Cross-Site Scripting (3.3.6.1)

Internet Information Services Other Vulnerability (CVE-2002-1694)

Severity

Medium

Classification

CVE-2004-2115

Tags

Missing Update Known Vulnerabilities