Team SHATTER Security Advisory – The Oracle Enterprise Manager Database Control 10gR1, 10gR2, and 11g (11.1.0.6) all suffer from a cross site scripting vulnerability in the REFRESHHOME parameter.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68815/shatter-oemxss2.txt
Source: https://packetstormsecurity.com/files/68815/shatter-oemxss2.txt.html