[Full-disclosure] Oracle - SQL Injection in package SDO_UTIL [DB05]

Oracle - SQL Injection in package SDOUTIL DB05 Systems Affected 10g Rel. 1, 10g Rel. 2 Severity High Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Alexander Kornbrust Advisory 16 April 2008 V 1.00 Advisory URL...

Oracle Security: SQL Injection in package DBMS_PRVTAQIS

SQL Injection in package DBMSPRVTAQIS This advisory http://www.red-database-security.com/advisory/oraclesqlinjectiondbmsprvtaqis.html Name SQL Injection in package DBMSPRVTAQIS DB02 Systems Oracle 9i Rel.1 - 10g Rel. 1 Severity High Risk Category SQL Injection Author Alexander Kornbrust ak at...

Modify Data via Inline Views

Name Modify Data via Inline Views 8107967 DB09 Systems Affected Oracle 9i - 10g Rel. 2 Severity High Risk Category Unauthorized Access Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com Advisory 18 October 2006 V 1.00 Advisory...

Append file in Oracle Webcache 9i

Name Append file vulnerability in Oracle Webcache 9i Systems Affected Oracle Application Server with Webcache 9i Severity Medium Risk Category Corruption of files Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 26 Apr 2005 V 1.00 Advisory...