Oracle HTTP Server powered by Apache is susceptible to a cross site scripting attack in its isqlplus script.