Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle 9i应用服务程序示例脚本远程信息泄露漏洞
Vulnerability Description
Oracle 9i应用服务器基于Apache Web服务器,支持SOAP、PL/SQL、XSQL、JSP等环境。 Oracle 9i应用服务器包含多个示例脚本存在安全缺陷,远程攻击者可以利用这些脚本发送任意邮件或获得敏感信息。 一个全新安装的Oracle 9i应用服务程序包含多个JSP脚本,这些脚本包括: http://servername/demo/email/sendmail.jsp http://servername/demo/info/info.jsp http://servername/cgi-
CVSS Information
N/A
Vulnerability Type
N/A