Unscored CVE-2007-5766 EUVD-2007-5736GHSA-93rm-7vw9-v636

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands vi…

Published Nov 8, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

References

http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
20071031 ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability mailing-list
http://www.zerodayinitiative.com/advisories/ZDI-07-058.html
3344 third-party-advisory
40080 vdb-entry