Description

SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

Remediation

References

CVE-2005-1197

Related Vulnerabilities

Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-8184)

PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2016-5424)

WordPress Plugin Watu Quiz Cross-Site Scripting (2.4.9)

Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32674)

WordPress Plugin MAZ Loader-Preloader Builder for WordPress SQL Injection (1.3.2)

Severity

High

Classification

CVE-2005-1197

Tags

Missing Update Known Vulnerabilities