CVE-2007-5508
CVE-2007-5508
Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) THEMES, (2) GIST, (3) TOKENS, (4) FILTER, (5) HIGHLIGHT, and (6) MARKUP procedures, aka DB03. NOTE: remote unauthenticated attack vectors exist when CTXSYS is used with oracle Application Server.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/4564no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://marc.info/?l=bugtraq&m=119332677525918&w=2http://secunia.com/advisories/27251http://secunia.com/advisories/27409http://securityreason.com/securityalert/3242http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-oracle-ctx-doc/http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.htmlhttp://www.securityfocus.com/archive/1/482425/100/0/threadedhttp://www.securityfocus.com/bid/26101http://www.securitytracker.com/id?1018823http://www.us-cert.gov/cas/techalerts/TA07-290A.htmlhttp://www.vupen.com/english/advisories/2007/3524http://www.vupen.com/english/advisories/2007/3626