CVE-2005-2983 SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the parameter form that appears when the paramform...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the parameter form that appears when the paramform parameter is set to yes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle reports | = 1.00 | No fix listed |
References
- 20050914 Oracle Reports: Generic SQL Injection Vulnerability via Lexical References exploit mailing-list vendor-advisory
- 20050914 Oracle Reports: Generic SQL Injection Vulnerability via Lexical References mailing-list
- www.red-database-security.com exploit vendor-advisory