CVE-2007-1506: XSS
Published Mar 19, 2007
·Updated
Cross-site scripting (XSS) vulnerability in PORTAL.wwvmain.renderwarningscreen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) poldurl and (2) pnewurl parameters.
Affected Software
1 affected component
Oracle Application Server Portal
Event History
Mar 19, 2007
CVE Published
10:19 PM
Mar 20, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1506?
The severity of CVE-2007-1506 is considered high due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2007-1506?
To fix CVE-2007-1506, sanitize inputs to the p_oldurl and p_newurl parameters to prevent XSS injection.
3
What software is affected by CVE-2007-1506?
CVE-2007-1506 affects Oracle Application Server Portal versions.
4
What type of vulnerability is CVE-2007-1506?
CVE-2007-1506 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2007-1506 be exploited remotely?
Yes, CVE-2007-1506 can be exploited remotely by attackers to inject arbitrary web scripts.