Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Oracle Subscribe
Filtered by product Html Db
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-3202 1 Oracle 1 Html Db 2017-07-10 6.8 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.
CVE-2005-3203 1 Oracle 1 Html Db 2017-07-10 4.6 MEDIUM N/A
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.