← Database

CVE-2005-3205

LOW CVSS: 3.5 Published: 2005-10-14 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.

Affected Platforms

Oracle Database Server

Weakness Type

CWE-79

References