Description

SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

Remediation

References

CVE-2005-1197

Related Vulnerabilities

Apache Tomcat Improper Authentication Vulnerability (CVE-2011-5063)

WordPress Plugin Share Woocommerce to Email Cross-Site Scripting (1.0.1)

WordPress Plugin WP Forum Server 'edit_post_id' Parameter SQL Injection (1.7)

WordPress Plugin Import CSV Directory Traversal (1.0)

WordPress Plugin Justified Gallery Cross-Site Scripting (1.7.0)

Severity

High

Classification

CVE-2005-1197

Tags

Missing Update Known Vulnerabilities