Description

SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS.

Remediation

References

CVE-2012-3132

Related Vulnerabilities

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Security Bypass (3.1.1.4.1)

Joomla CVE-2021-23128 Vulnerability (CVE-2021-23128)

WordPress Plugin Duplicator-WordPress Migration Cross-Site Request Forgery (1.1.2)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.12)

WordPress Plugin Accept Signups 'email' Parameter Cross-Site Scripting (0.1)

Severity

Medium

Classification

CVE-2012-3132 CWE-138

Tags

Missing Update Known Vulnerabilities