CVE-2006-0586: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in 1 ATTACHJOB, 2 HASPRIVS, and 3 OPENJOB functions in the SYS.KUPV$FT package; and 4 UPDATEJOB, 5 ACTIVEJOB, 6 ATTACHPOSSIBLE, 7...