exploitDog

CVE-2007-5508

Опубликовано: 17 окт. 2007

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) THEMES, (2) GIST, (3) TOKENS, (4) FILTER, (5) HIGHLIGHT, and (6) MARKUP procedures, aka DB03. NOTE: remote unauthenticated attack vectors exist when CTXSYS is used with oracle Application Server.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01698

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-7xmh-48w2-qq3p

github

почти 4 года назад

Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) THEMES, (2) GIST, (3) TOKENS, (4) FILTER, (5) HIGHLIGHT, and (6) MARKUP procedures, aka DB03. NOTE: remote unauthenticated attack vectors exist when CTXSYS is used with oracle Application Server.

EPSS

Процентиль: 82%

0.01698

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89