How to Buy
This script is Copyright (C) 2001-2014 Matt Moore
Arbitrary code can be run on the remote host.
The Oracle XSQL Servlet allows arbitrary Java code to be executed by an
attacker by supplying the URL of a malicious XSLT stylesheet when making
a request to an XSQL page.
Until Oracle changes the default behavior for the XSQL servlet to
disallow client supplied stylesheets, use the following workaround.
Add allow-client-style='no' on the document element of every
xsql page on the server. This plug-in tests for this vulnerability
using a sample page, airport.xsql, which is supplied with the Oracle
XSQL servlet. Sample code should always be removed from production
Risk factor :
High / CVSS Base Score : 7.5
CVSS Temporal Score : 5.5
Nessus Plugin ID: 10594 ()
Bugtraq ID: 2295
CVE ID: CVE-2001-0126
Get Nessus Professional to scan unlimited IPs, run compliance checks & more
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.