Unrated severityNVD Advisory· Published Oct 14, 2005· Updated Jun 16, 2026
CVE-2005-3202
CVE-2005-3202
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31.3 through 1.3.6+ 2 more
- (no CPE)range: 1.3 through 1.3.6
- cpe:2.3:a:oracle:html_db:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:html_db:1.3.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
10- archives.neohapsis.com/archives/fulldisclosure/2005-10/0173.htmlnvdExploitVendor Advisory
- www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdfnvdExploitVendor Advisory
- www.securityfocus.com/bid/15031nvdExploit
- secunia.com/advisories/14935/nvdVendor Advisory
- www.red-database-security.com/advisory/oracle_htmldb_css.htmlnvdVendor Advisory
- marc.infonvd
- securityreason.com/securityalert/62nvd
- www.osvdb.org/20051nvd
- www.osvdb.org/20052nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/22540nvd
News mentions
0No linked articles in our index yet.