CVE-2005-1381

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.

• http://marc.info/?l=bugtraq&m=111472423409560&w=2
• http://secunia.com/advisories/15143Vendor Advisory
• http://www.osvdb.org/15910Vendor Advisory
• http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/13421Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/13422Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20309
• http://marc.info/?l=bugtraq&m=111472423409560&w=2
• http://secunia.com/advisories/15143Vendor Advisory
• http://www.osvdb.org/15910Vendor Advisory
• http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/13421Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/13422Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20309

Published

May 3, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1375Multiple SQL injection vulnerabilities in Claroline 1.5.3 th…
• CVE-2005-1376Multiple directory traversal vulnerabilities in (1) document…
• CVE-2005-1377Multiple PHP remote file inclusion vulnerabilities in Clarol…
• CVE-2005-1378SQL injection vulnerability in posting_notes.php in the note…
• CVE-2005-1379The LAM runtime environment package (lam-runtime-7.0.6-2mdk)…
• CVE-2005-1380Cross-site scripting (XSS) vulnerability in BEA Admin Consol…
• CVE-2005-1382The webcacheadmin module in Oracle Webcache 9i allows remote…
• CVE-2005-1383The OHS component 1.0.2 through 10.x, when UseWebcacheIP is …
• CVE-2005-1384Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allo…
• CVE-2005-1385Safari 1.3 allows remote attackers to cause a denial of serv…
• CVE-2005-1386PHP-Nuke 7.6 and earlier allows remote attackers to obtain s…
• CVE-2005-1387Cocktail 3.5.4 and possibly earlier in Mac OS X passes the a…