Description

SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

Remediation

References

CVE-2005-1197

Related Vulnerabilities

WordPress Plugin Global Content Blocks PHP Code Execution and Information Disclosure Vulnerabilities (1.5.1)

Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-37843)

WebLogic CVE-2016-5531 Vulnerability (CVE-2016-5531)

Oracle Application Server CVE-2009-1999 Vulnerability (CVE-2009-1999)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2931)

Severity

High

Classification

CVE-2005-1197

Tags

Missing Update Known Vulnerabilities