Description
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
References
- 20040604 Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite mailing-list
- TA04-160A third-party-advisory
- 10465 vdb-entry
- http://www.integrigy.com/alerts/OraAppsSQLInjection.htm
- VU#961579 third-party-advisory
- oracle-ebusiness-sql-injection(16324) vdb-entry
- O-153 third-party-advisory government-resource
- 20040604 Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite mailing-list
- http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf