Description
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS, and that DB22 is for SQL injection in SYS.DBMS_UPGRADE.
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-10313 Vulnerability (CVE-2017-10313)
Grafana Improper Verification of Cryptographic Signature Vulnerability (CVE-2022-31123)
phpMyFAQ Improper Authorization Vulnerability (CVE-2014-6049)
WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)
WordPress Plugin Slideshow Gallery LITE Multiple Unspecified Vulnerabilities (1.5.3.3)