CVE-2013-0372

Related Files

Oracle Enterprise Manager advReplicationAdmin SQL Injection

Posted Mar 1, 2013

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - Some parameters of /em/console/database/dist/advRepl/advReplicationAdmin in Oracle Enterprise Manager are vulnerable to SQL Injection attacks. Versions affected include Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2, 11.2.0.3.

tags | advisory, sql injection

advisories | CVE-2013-0372

SHA-256 | 764c0111ae8ae757f9bc4ad86d2176345b8915225042a02c5117b991396719f1

Download | Favorite | View

Oracle Enterprise Manager advReplicationAdmin SQL Injection

Posted Feb 22, 2013

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - An attacker hosting a malicious web site can execute SQL statements in the backend database when an administrator with an open session in Oracle Enterprise Manager web application visits the malicious web site. Versions affected include Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2, 11.2.0.3.

tags | advisory, web, sql injection

advisories | CVE-2013-0372

SHA-256 | 49571641e710a1ec758dcec0e1e03620a16c0aef2ccc5eac49327bf8c09b5f3c

Download | Favorite | View