Description

Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11. NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in MDSYS.SDO_LRS_TRIG_INS.

Remediation

References

CVE-2006-1875

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1756)

Grafana Files or Directories Accessible to External Parties Vulnerability (CVE-2026-33380)

PHP NULL Pointer Dereference Vulnerability (CVE-2016-7131)

Joomla! Core 3.x.x Cross-Site Scripting (3.1.2 - 3.2.2)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37821)

Severity

Critical

Classification

CVE-2006-1875

Tags

Missing Update Known Vulnerabilities