Description
SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.
Remediation
References
Related Vulnerabilities
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-18033)
WordPress Plugin Access Expiration Cross-Site Scripting (1.1)
WordPress Plugin Advance Menu Manager Security Bypass (3.0)
WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.29)
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5496)