EUVD-2006-5336

Malware in sbrugna...

CVE-2006-7158

Cross-site scripting XSS vulnerability in Oracle Application Express APEX before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATIONMSG parameter. NOTE: it is likely that this issue overlaps one of the identifiers in CVE-2006-5351...

CVE-2006-7158: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Oracle Application Express APEX before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATIONMSG parameter. NOTE: it is likely that this issue overlaps one of the identifiers in CVE-2006-5351...

CVE-2006-5351: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Application Express formerly Oracle HTML DB 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln 1 APEX01, 2 APEX02, 3 APEX03, 4 APEX05, 5 APEX06, 6 APEX07, 7 APEX08, 8 APEX09, 9 APEX10, 10 APEX11, 11 APEX12, 12 APEX13, 13 APEX14, 14...