Oracle Warehouse Builder SQL Injection

Added: 08/01/2011 CVE: CVE-2011-0799 BID: 47431 OSVDB: 71956 Background Oracle Warehouse Builder OWB is an ETL tool produced by Oracle that offers a graphical environment to build, manage and maintain data integration processes in business intelligence systems. Problem A SQL injection vulnerabili...

Oracle Warehouse Builder SQL Injection

Added: 08/01/2011 CVE: CVE-2011-0799 BID: 47431 OSVDB: 71956 Background Oracle Warehouse Builder OWB is an ETL tool produced by Oracle that offers a graphical environment to build, manage and maintain data integration processes in business intelligence systems. Problem A SQL injection vulnerabili...

Oracle Warehouse Builder SQL Injection

Added: 08/01/2011 CVE: CVE-2011-0799 BID: 47431 OSVDB: 71956 Background Oracle Warehouse Builder OWB is an ETL tool produced by Oracle that offers a graphical environment to build, manage and maintain data integration processes in business intelligence systems. Problem A SQL injection vulnerabili...

Oracle Database Multiple Vulnerabilities (April 2011 CPU)

The remote Oracle database server is missing the April 2011 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Oracle Warehouse Builder CVE-2011-0792, CVE-2011-0799 - Oracle Security Service CVE-2009-3555 - Application Service Level...

CVE-2011-0799

Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 OWB, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Warehouse Builder User Account...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 OWB and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Dimensional Data Modeling...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 OWB, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Warehouse Builder User Account...

CVE-2011-0799

Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 OWB, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Warehouse Builder User Account...

CVE-2011-0799

CVE-2011-0799 affects Oracle Warehouse Builder (OWB), a component of Oracle Database Server, in versions 10.2.0.5, 11.1.0.7, 11.2.0.1 and prior. The vulnerability is an SQL injection flaw caused by improper input validation in a stored procedure, exploitable by an authenticated user with CONNECT ...

CVE-2011-0792

CVE-2011-0792 affects Oracle Warehouse Builder (OWB) in Oracle Database Server 10.2.0.5 and 11.1.0.7. The vulnerability is a PL/SQL injection in OWBREPOS_OWNER.WB_OLAP_AW_SET_SOLVE_ID, which can let an attacker with OWBREPOS_OWNER rights escalate privileges and potentially access the OS. This is ...

Kinect hackers take control of the action !

Christopher Baker spent Boxing Day as a VJ – video jockey – for a warehouse party in Liverpool. Among the items being used was a Microsoft Kinect controller, normally used to play Xbox 360 games such as Kinectimals or Kinect Sports. But Baker wasn't playing games: the system was rigged up to a...

Directory traversal

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0840

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0840

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0840

The vulnerability CVE-2008-0840 affects Public Warehouse LightBlog 9.6, where view_member.php is vulnerable to a directory traversal via two-dot-dot in the username parameter, allowing inclusion and execution of arbitrary local files. This is a local access issue with partial confidentiality, int...

Unfixed XSS vulnerability at www.pets-warehouse.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.pets-warehouse.com, which at the time of submission ranked 254248 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007. It is...

CyberBuild vuln.

CyberBuild vuln. Vuln. discovered by : r0t Date: 1 may 2006 vendorlink:www.smartwin.com.au/cyberbuild.htm affected versions:last orginal advisory:http://pridels.blogspot.com/2006/05/cyberbuild-vuln.html Vuln. Description: 1. SQL injection. CyberOffice Warehouse Builder contains a flaw that allows...