Exploit Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities

[Exploiter]

EDB-ID

29301

Проверка EDB

1. Пройдено

Автор

PUTOSOFT SOFTPUTO

Тип уязвимости

WEBAPPS

Платформа

JSP

CVE

cve-2006-6697

Дата публикации

2006-12-20

Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities

source: https://www.securityfocus.com/bid/21686/info

Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. 

A remote attacker may exploit these vulnerabilities to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

Versions 10g and 9.0.2 are vulnerable; other versions may also be affected.

http://www.example.com/webapp/jsp/calendar.jsp?enc=iso-8859-1%0d%0aContent-length=12%0d%0a%0d%0a%3Cscript%3Ealert('hi')%3C/script%3E