Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER. NOTE: some of these vectors might be in DBMS_SQLTUNE_INTERNAL.

Remediation

References

CVE-2006-5338

Related Vulnerabilities

Chamilo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32925)

WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5)

MySQL CVE-2016-0594 Vulnerability (CVE-2016-0594)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12706)

Joomla Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-10238)

Severity

Critical

Classification

CVE-2006-5338

Tags

Missing Update Known Vulnerabilities