Information disclosure

Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors...

CVE-2008-2612

CVE-2008-2612 affects the Hyperion BI Plus component in Oracle Application Server (versions 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, 9.3.1.0). The Oracle CPU July 2008 risk matrix marks this as a remote vulnerability exploitable via HTTP with network access and no authentication, with a base CVSS v2 s...

CVE-2008-2612: Undefined Security Weakness

Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors...

CVE-2006-5675

Affected software: Pentaho BI Suite before 1.2 RC3 (1.2.0.470-RC3). Vulnerability span: possible SQL injection in MySQL scripts related to security changes. Root cause/triage: scripts requiring security changes cited as the issue; exact impact and exploit vectors are not detailed in the provided ...

CVE-2006-5675

Multiple unspecified vulnerabilities in Pentaho Business Intelligence BI Suite before 1.2 RC3 1.2.0.470-RC3 have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts...

CVE-2006-5675: Undefined Security Weakness

Multiple unspecified vulnerabilities in Pentaho Business Intelligence BI Suite before 1.2 RC3 1.2.0.470-RC3 have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts...

CVE-2006-4825: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in clfiles/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 ti, 2 bi, or 3 cbgi parameters...