CVE-2007-1506

Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.81% chance of exploitation in the next 30 days, 77th percentile

Published

2007-03-19

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29749

References

• CVE Record
• NVD entry

Related

• CVE-2007-1501
• CVE-2007-1508
• CVE-2007-1499
• CVE-2007-1509
• CVE-2007-1493
• CVE-2007-1510