CVE-2011-0836

This exploit demonstrates a reflected XSS vulnerability in Oracle JD Edwards EnterpriseOne by injecting a malicious script into the RENDER_MAFLET parameter. The payload is delivered via a crafted GET request, which executes arbitrary JavaScript in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in Oracle JD Edwards EnterpriseOne by injecting a malicious script into the 'jdemafjasLinkTarget' parameter. The crafted URL triggers an alert popup, confirming the vulnerability.

This exploit demonstrates a reflected XSS vulnerability in Oracle JD Edwards EnterpriseOne by injecting a malicious script via the 'e1.namespace' parameter in a GET request. The payload is URL-encoded and triggers an alert popup when executed in a vulnerable application.

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Oracle JD Edwards EnterpriseOne by injecting a malicious script into the 'e1.namespace' parameter. The provided HTTP request shows the payload being delivered via a POST request, which executes arbitrary JavaScript in the context of the affected site.

This exploit demonstrates a reflected XSS vulnerability in Oracle JD Edwards EnterpriseOne by injecting a malicious script into the 'jdeowpBackButtonProtect' parameter. The payload is URL-encoded and triggers an alert dialog when executed in the context of the affected site.