medium6.8Public exploit code
CVE-2006-6703
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in w…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting2006-12-22 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Oracle10g | All versions |
| Oracle | Oracle9i | All versions |