CVE-2005-0873

Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.

• http://marc.info/?l=bugtraq&m=111168323804203&w=2
• http://secunia.com/advisories/17250
• http://www.kb.cert.org/vuls/id/210524US Government Resource
• http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
• http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html
• http://www.securityfocus.com/bid/12892Exploit
• http://www.securityfocus.com/bid/15134
• http://www.us-cert.gov/cas/techalerts/TA05-292A.htmlUS Government Resource
• http://marc.info/?l=bugtraq&m=111168323804203&w=2
• http://secunia.com/advisories/17250
• http://www.kb.cert.org/vuls/id/210524US Government Resource
• http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
• http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html
• http://www.securityfocus.com/bid/12892Exploit
• http://www.securityfocus.com/bid/15134
• http://www.us-cert.gov/cas/techalerts/TA05-292A.htmlUS Government Resource

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0867Integer overflow in Linux kernel 2.6 allows local users to o…
• CVE-2005-0868AS/400 Telnet 5250 terminal emulation clients, as implemente…
• CVE-2005-0869phpSysInfo 2.3 allows remote attackers to obtain sensitive i…
• CVE-2005-0870Multiple cross-site scripting (XSS) vulnerabilities in phpSy…
• CVE-2005-0871calendar_scheduler.php in Topic Calendar 1.0.1 module for ph…
• CVE-2005-0872Cross-site scripting (XSS) vulnerability in calendar_schedul…
• CVE-2005-0874Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, …
• CVE-2005-0875Multiple buffer overflows in the Yahoo plug-in for Trillian …
• CVE-2005-0876Off-by-one buffer overflow in Dnsmasq before 2.21 may allow …
• CVE-2005-0877Dnsmasq before 2.21 allows remote attackers to poison the DN…7.5
• CVE-2005-0878Cross-site scripting (XSS) vulnerability in MercuryBoard bef…
• CVE-2005-0879PHP remote file include vulnerability in (1) content.php and…