CVE:CVE-2007-3553
CNNVD:CNNVD-200707-029
Oracle应用程序服务器11i中的Rapid Install Web Server存在跨站脚本攻击漏洞。远程攻击者可以借助"次级注册页面"的一个URL，注入任意的web脚本或HTML。例如使用(1)pls/和(2)pls/MSBEP004/。
solution:Upgrade oracle application_server to a higher version than 11i,and avoid the version 11i; Upgrade oracle rapid_install_web_server to a higher version than *