CVE-2003-1193

Currently unrated

Key Information:

Vendor
Oracle
Status
Oracle9i
Application Server Portal
Vendor
CVE Published:
3 November 2003

Summary

Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL.

References

http://otn.oracle.com/deploy/security/pdf/2003alert61.pdf
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/343520
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/13593
vdb-entryx_refsource_XF

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.