Description
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
References
- oracle-diagnostics-sql-injection(25259) vdb-entry
- 16844 vdb-entry
- http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf
- 19076 third-party-advisory