Oracle Reports SQL injection
Published:		15.09.2005
Source:		REDDATABASESEC
SecurityVulns ID:		5211
Type:		library
Level:		5/10
Description:		It's possible to inject SQL to report if it uses lexical references without parameter validation.

Affected:

ORACLE : Oracle Reports 2.0

Original document

Kornbrust, Alexander, Oracle Reports: Generic SQL Injection Vulnerability via lexical references (15.09.2005)

Files:		SQL Injection in Oracle Reports
Discuss:		Read or add your comments to this news (0 comments)