Security Advisory

CVE-2005-3205

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-10-14 04:00:00
Last updated 2024-08-07 23:01:59
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.