支持本站 — 捐款将帮助我们持续运营

目标: 1000 元，已筹: 1000 元

100.0%
立即捐款

POC详情: e7d22d7e2fa016aa22b0da962b162b832b80fd3d

来源
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3528.yaml
关联漏洞
标题:Oracle E-Business Suite Oracle Applications Framework 安全漏洞 (CVE-2017-3528)
Description:Oracle E-Business Suite（电子商务套件）是美国甲骨文（Oracle）公司的一套全面集成式的全球业务管理软件。Oracle Applications Framework（OA Framework，OAF）是其中的一个商务开发平台组件。 Oracle E-Business Suite中的Oracle Applications Framework组件的Popup windows (lists of values, datepicker, etc.)子组件存在安全漏洞。攻击者可利用该漏洞未授
Description
The Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)) is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data.
文件快照

 id: CVE-2017-3528

info:
  name: Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect
  author: 0x_

...
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。