Oracle ISQLPlus SID Check

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle iSQLPlus SID Check', 'Description' = %q This module attempts to bruteforce the SID on the Oracle application server iSQLPlus login pages. ...

Oracle 10g iSQLPLus Service Heap Overflow (CVE-2004-1371)

Oracle Application Server ships with an interactive and batch query tool called SQL Plus. This tool consists of a command line utility, a Windows Graphical User Interface GUI, and a web based interface. The web based interface is called iSQL Plus, it is a front end to the SQL Plus utility. The iS...

Oracle 9iAS iSQLplus XSS

The login-page of Oracle9i iSQLplus allows the injection of HTML and Javascript code via the username and password parameters. Description : The remote host is running a version of the Oracle9i 'isqlplus' CGI which is vulnerable to a cross site scripting issue. An attacker may exploit this flaw t...

Oracle 9i Application Server iSQLplus XSS Vulnerability - Active Check

The login-page of Oracle 9i Application Server AS iSQLplus allows the injection of HTML and Javascript code via the username and password parameters. SPDX-FileCopyrightText: 2004 Frank Berger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

oracle_isqlplus_css.txt

Cross-Site-Scripting Vulnerability in Oracle iSQLPlus Name Cross-Site-Scripting Vulnerability in Oracle iSQLPlus Systems Affected Oracle Database 9i Rel. 2 Severity Low Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...

[Full-disclosure] Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus

Cross-Site-Scripting Vulnerability in Oracle iSQLPlus Name Cross-Site-Scripting Vulnerability in Oracle iSQLPlus Systems Affected Oracle Database 9i Rel. 2 Severity Low Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...

CVE-2004-2115

Oracle HTTP Server 1.3.22 (based on Apache) is affected by CVE-2004-2115, a cross-site scripting (XSS) vulnerability in which remote attackers can inject and execute arbitrary script as other users via the isqlplus request’s (action, username, or password) parameters. The CVE entry cites this as ...

CVE-2004-2115

Multiple cross-site scripting XSS vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the 1 action, 2 username, or 3 password parameters in an isqlplus request...

mod_plsql crossite scripting

Crossite scripting in isqlplus...