EUVD-2006-5336

Malware in sbrugna...

CVE-2006-5599: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5351: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Application Express formerly Oracle HTML DB 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln 1 APEX01, 2 APEX02, 3 APEX03, 4 APEX05, 5 APEX06, 6 APEX07, 7 APEX08, 8 APEX09, 9 APEX10, 10 APEX11, 11 APEX12, 12 APEX13, 13 APEX14, 14...