EUVD-2005-2983

Malware in sbrugna...

CVE-2005-2983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the parameter form that appears when the paramform parameter is set to yes...

Oracle Reports: Generic SQL Injection Vulnerability via lexical references

Hello Today I published a new advisory concerning a generic SQL Injection vulnerability in Oracle Reports. Details Oracle Reports provides a feature called lexical references. A lexical reference is a placeholder for text that you embed in a SELECT statement. It is possible to replace the clauses...