Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus
Oracle iSQL*Plus is a web interface to SQL*Plus and vulnerable against cross site scripting.
Oracle Database 9i Release 2
This bug is fixed with Critical Patch Update July 2005 (CPU July 2005).
Oracle forgot to inform Red-Database-Security that this bug is fixed with CPU July 2005.
1. Start iSQLPlus and login as user scott (http://myserver/isqlplus )
2. set markup HTML TABLE ><script>alert(document.cookie);</script>
3. select a table (e.g. select * from cat)
==> a window pops up
5-nov-2003 Oracle secalert was informed
6-nov-2003 Bug confirmed
12-jul-2005 Oracle published CPU July 2005 without informing Red-Database-Security that this bug is already fixed.
07-oct-2005 Red-Database-Security published this advisory
© 2005 by Red-Database-Security GmbH - last update 03-nov-2005