Description
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS, and that DB22 is for SQL injection in SYS.DBMS_UPGRADE.
Remediation
References
Related Vulnerabilities
WordPress Plugin Download Plugins and Themes from Dashboard Cross-Site Scripting (1.5.0)
WordPress Plugin Traffic Manager Multiple Vulnerabilities (1.4.5)
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4792)
WordPress Plugin Google Doc Embedder Cross-Site Scripting (2.5.18)
WordPress Plugin Widgets for WooCommerce Products on Elementor Security Bypass (1.0.5)