CVE-2007-1506

Currently unrated

Key Information:

Vendor
Oracle
Status
Application Server Portal
Vendor
CVE Published:
19 March 2007

Summary

Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.

References

http://www.securityfocus.com/archive/1/463012/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://securityreason.com/securityalert/2463
third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilities/33028
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.