CVE-2011-2252

CVE-2011-2261 affects Oracle Secure Backup — specifically the Administration Server login.php, where the validate_login function passes the username to an exec_qr call with only limited sanitization. This permits remote, unauthenticated attackers to inject commands and potentially achieve remote ...