CVE-2010-2404

CVE-2010-2404 is a persistent cross-site scripting vulnerability in Oracle iRecruitment (File Uploading Module) within Oracle E-Business Suite. The advisory notes a vulnerable flow on the account information page where users upload resumes (Word documents), enabling an attacker to inject XSS payl...