Wanda supplier system SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Wanda a sub-Stationsql injection. Sensitive information disclosure. Detailed description: Wanda scm system login boxsql injection. http://www.vans-china.cn/LoginUser?USERNO=%27&PWD=%2 7 5 0 0 error. User name just to lose, suggesting the absence of the user;USERNO=%2 7 and 1=1...

PT-2013-21: XML External Entities Injection in Oracle Database

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Oracle Database. If an attacker sends specially crafted SQL query containing malformed XML to Oracle Database server, the server will automatically send the contents of remote resourc...

Oracle Application Express (Apex) Unspecified Issues (pre 3.0.1)

There are unspecified vulnerabilities in versions prior to version 3.0.1 of the Oracle Application Express component of the Oracle Database. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detection script for multiple...

Oracle Application Express (Apex) CVE-2010-0076

An unspecified vulnerability in version 3.2.1 of the Application Express Application Builder component of Oracle Database allows remote, authenticated users to affect confidentiality, integrity, and availability via unpublished vectors...

Oracle Application Express (Apex) Unspecified Issues (pre 2.2.1)

There are unspecified vulnerabilities in versions prior to version 2.2.1 of the Oracle Application Express component of the Oracle Database. The updated version of Apex contains '35 new security fixes for Oracle Application Express, 25 of which may be remotely exploitable without authentication'...

Oracle Application Express (Apex) CVE-2010-0892

An unspecified vulnerability in version 3.2 of the Application Express component of Oracle Database Server allows remote attackers to affect integrity via unknown vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/...

Oracle Application Express (Apex) CVE-2008-4005

An unspecified vulnerability in the Oracle Application Express component of Oracle Database version 11.1.0.6 allows remote, authenticated users to affect confidentiality, integrity, and availability via unpublished vectors...

Oracle Application Express (Apex) CVE-2012-1708

An unspecified vulnerability in versions 4.0 and 4.1 of the Application Express Apex component of the Oracle Database Server allows remote attackers to affect integrity via unpublished vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012...

CVE-2013-0366

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0361...

Design/Logic Flaw

Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2012-3220

Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2012-3220

CVE-2012-3220 is a published vulnerability in Oracle Spatial/GeoRaster within Oracle Database Server (versions 10.2.0.3–11.2.0.3) that exploits a stack-based overflow in the GeoRaster API. The issue allows a remote attacker who can connect to spatially enabled Oracle databases to execute arbitrar...

CVE-2013-0363

Technical details about CVE-2013-0363 are not publicly provided in the supplied documents. The available records describe an unspecified vulnerability in Oracle Mobile/Lite Server components without concrete affected versions, vectors, or mitigations. Monitor for new disclosures.

CVE-2013-0362

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0363 and CVE-2013-0364...

PT-2013-2260

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0363 and CVE-2013-0364...

PT-2013-2261

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0362 and CVE-2013-0364...

PT-2013-2262

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server formerly Oracle Database Lite 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0362 and CVE-2013-0363...

PT-2013-1582

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.2.0.3 through 10.2.0.5 Oracle Database Server versions 11.1.0.7 Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Description The issue affects the Spatial component in Oracle Database Server, allowin...

PT-2013-2259

Name of the Vulnerable Software and Affected Versions Oracle Database Mobile/Lite Server versions 10.3.0.3 through 11.1.0.0 Description The issue affects the confidentiality, integrity, and availability of the system. It can be exploited by remote attackers via unknown vectors. Recommendations Fo...

PT-2013-2264

Name of the Vulnerable Software and Affected Versions Oracle Database Mobile/Lite Server versions 10.3.0.3 through 11.1.0.0 Description The issue affects the confidentiality, integrity, and availability of the system. It can be exploited by remote attackers via unknown vectors. Recommendations Fo...