Team SHATTER Security Advisory – The Oracle Enterprise Manager Database Control 10gR1 and Oracle Enterprise Manager Grid Control 10gR1 suffer from a cross site scripting vulnerability in the REFRESHHOME parameter.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68814/shatter-oemxss.txt
Source: https://packetstormsecurity.com/files/68814/shatter-oemxss.txt.html