CVE-2006-0586: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in 1 ATTACHJOB, 2 HASPRIVS, and 3 OPENJOB functions in the SYS.KUPV$FT package; and 4 UPDATEJOB, 5 ACTIVEJOB, 6 ATTACHPOSSIBLE, 7...

[Full-disclosure] Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT

Oracle forgot to inform me that these vulnerabilities are also fixed. http://www.red-database-security.com/advisory/oraclesqlinjectionkupv$ ft.html SQL Injection in package SYS.KUPV$FT Name SQL Injection in package SYS.KUPV$FT Affected Oracle 10g Release 1 Severity High Risk Category SQL Injectio...