Oracle Portal 9.0.2 Calendar.JSP Multiple HTTP Response Splitting Vulnerabilities

2006-12-20T00:00:00
ID EDB-ID:29301
Type exploitdb
Reporter putosoft softputo
Modified 2006-12-20T00:00:00

Description

Oracle Portal 9.0.2 Calendar.JSP Multiple HTTP Response Splitting Vulnerabilities. CVE-2006-6697. Webapps exploit for jsp platform

                                        
                                            source: http://www.securityfocus.com/bid/21686/info

Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. 

A remote attacker may exploit these vulnerabilities to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

Versions 10g and 9.0.2 are vulnerable; other versions may also be affected.

http://www.example.com/webapp/jsp/calendar.jsp?enc=iso-8859-1%0d%0aContent-length=12%0d%0a%0d%0a%3Cscript%3Ealert('hi')%3C/script%3E