CVE-2007-1609

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

Oracle Dynamic Monitoring Services crossite scripting

Crossite scripting with /servlet/Spy...

Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy

Hi, Access to http://somesite/servlet/Spy should be restricted. But generally database or system administrators ignore the hardening of Oracle apllications or database. I have noticed XSS bug in Dynamic Monitoring services on Oracle-Application-Server-10g/10.1.2.0.0...

Dynamic function monitoring technology in a buffer overflow detection-vulnerability warning-the black bar safety net

Dynamic function monitoring technology in a buffer overflow detection applications Abstract: this article through the Window of the environment under the function of the hijacking method of analysis, and combined with the debugger techniques, the proposed dynamic monitoring process of the functio...

Oracle 9iAS Dynamic Monitoring Services

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. OpenVAS Vulnerability Test $Id: oracle9iapachedms.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS Dynamic Monitoring...

Oracle 9i Application Server Dynamic Monitoring Services Accessible - Active Check

In a default installation of Oracle 9i Application Server AS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and ar...

Oracle 9iAS DMS / JPM Pages Anonymous Access

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. %NASLMINLEVEL 70300 This script was written by Matt Moore Script audit and contributions from Carmichael Security Erik Anderson Added...