Info

Last Modified

about 1 year ago

Percent Complete

25%

Disclosure

Oct 31, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

This Entry needs help! It is only 25% Complete. Click the edit link above to add more information.

Contributing is fast and easy, and benefits the entire security community.

Keywords

Description

(Description Provided by CVE) : SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

Classification

Location: Remote/Network Access Required
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Disclosure: Vendor Verified
OSVDB: Web Related

Products

Unknown or Incomplete

References

CVE ID: 2007-5766 (see also: NVD)
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-11/0001.html
Other Advisory URL: http://securityreason.com/securityalert/3344
http://www.zerodayinitiative.com/advisories/ZDI-07-058.html
Vendor Specific News/Changelog Entry: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct200 ......

Credit

Unknown or Incomplete

Blogs

Provided by Technorati

2007/11/08 00:00:00 | CVE-2007-5766

from: National Vulnerability Database

CVE-2007-5766 Publish Date: 11/8/2007 SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors

Views This Week

Views All Time

Info

Last Modified

Percent Complete

Disclosure

Discovery

Dates

Exploit

Solution

Keywords

Description

Classification

Products

References

Credit

Blogs

Comments