CVE-2005-3202

MEDIUM 6.8CVE-2005-3202 · Published 14/10/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
html db oracle	`= 1.3= 1.3.6`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.

References

archives.neohapsis.com/archives/fulldisclosure/2005-10/0173.html · Exploit
marc.info
secunia.com/advisories/14935 · Vendor Advisory
securityreason.com/securityalert/62
oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf · Exploit
osvdb.org/20051
osvdb.org/20052
red-database-security.com/advisory/oracle_htmldb_css.html · Vendor Advisory
securityfocus.com/bid/15031 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/22540

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free