This script is Copyright (C) 2001-2014 Matt Moore
Arbitrary code can be run on the remote host.
The Oracle XSQL Servlet allows arbitrary Java code to be executed by an
attacker by supplying the URL of a malicious XSLT stylesheet when making
a request to an XSQL page.
Until Oracle changes the default behavior for the XSQL servlet to
disallow client supplied stylesheets, use the following workaround.
Add allow-client-style='no' on the document element of every
xsql page on the server. This plug-in tests for this vulnerability
using a sample page, airport.xsql, which is supplied with the Oracle
XSQL servlet. Sample code should always be removed from production
Risk factor :
High / CVSS Base Score : 7.5
CVSS Temporal Score : 5.5