CVE-2005-1381
Oracle Application Server Web Cache 9i - Cross-Site Scripting via cache_dump_file or PartialPageErrorPage Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1381. PoCs published by Alexander Kornbrust.
AI-analyzed exploit summary The exploit demonstrates a cross-site scripting (XSS) vulnerability in Oracle Application Server 9i Webcache administration console by injecting malicious JavaScript via the 'PartialPageErrorPage' parameter. The payload triggers an alert with the victim's cookies, confirming the vulnerability.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.
Exploits (2)
The exploit demonstrates a cross-site scripting (XSS) vulnerability in Oracle Application Server 9i Webcache administration console by injecting malicious JavaScript via the 'PartialPageErrorPage' parameter. The payload triggers an alert with the victim's cookies, confirming the vulnerability.
The exploit demonstrates a cross-site scripting (XSS) vulnerability in Oracle Application Server 9i Webcache administration console by injecting malicious JavaScript via the 'cache_dump_file' parameter. The payload triggers an alert with the victim's cookies, confirming the vulnerability.