Oracle Application Server Exploits

Services
Oracle Audit / Hardening
Security Training
Consulting

Information
Oracle Security Blog
Published Alerts
Upcoming Alerts
Patch Information
Whitepaper
Presentations
Oracle Fact Sheets
Exploits
Tutorials
Videos
Scripts

News & Events
Events
News

Company
Contact
People
Partner
Impressum
Sitemap

Oracle Application Server Exploits

This section contains exploits for the Oracle Application Server.

14-sep-2005 SQL Injection in Oracle Reports [SQL Injection]

12-apr-2005 SQL Injection in Oracle Forms [SQL Injection]

2-may-2005 Corrupt files via Webcache [D.o.S.]

26-apr-2005 SQL Injection in Oracle Portal via WWV_FORM [SQL Injection]

14-may-2005 Cross Site Scripting in iSQL*Plus logon parameter [CSS]

14-may-2005 Cross Site Scripting in iSQL*Plus action parameter [CSS]

14-may-2005 Read files via iSQL*Plus load.uix [Read files]

ƒD 2005 by Red-Database-Security GmbH - last update 02-nov-2005

Hardening Oracle Application Server

Change Default Password in the Infrastructure Database
Protect the TNS Listener
Remove Demo Applications / Pages
Disable Reports Diagnosis Pages
Disable Forms Query/Where
Stop unneeded Components