CVE:CVE-2002-1636
CNNVD:CNNVD-200212-440
Oracle 9i Application Server (9iAS)的htp PL/SQL包存在跨站脚本（XSS）漏洞。远程攻击者借助htp.print的cbuf参数注入任意web脚本或者HTML。
solution:Upgrade oracle application_server to a higher version than 1.0.2,and avoid the version 1.0.2