Description

Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11. NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in MDSYS.SDO_LRS_TRIG_INS.

Remediation

References

CVE-2006-1875

Related Vulnerabilities

WordPress Plugin Essential Widgets Security Bypass (1.8)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.31)

WordPress Plugin Import all XML, CSV & TXT into WordPress Information Disclosure (3.6.74)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2161)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000194)

Severity

Critical

Classification

CVE-2006-1875

Tags

Missing Update Known Vulnerabilities