Published: 17/10/2007 Updated: 15/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 665

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows malicious users to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably covered by CVE-2007-5510, but there are insufficient details to be certain.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle database server

/******************************************************************/ /******* Oracle 10g LTFINDRICSET SQL Injection Exploit **********/ /******************************************************************/ /*********** sploit grant DBA to scott **************/ /*********** evil cursor injection **************/ /**** ...

#!/usr/bin/perl # # rawlabmindcreationscom/codes/exp/oracle/sys-lt-findricsetV2pl # # Oracle SYSLTFINDRICSET exploit (11g/10g) # - Version 2 - New "evil cursor injection" tip! # - No "create procedure" privilege needed! # - See: wwwdatabasesecuritycom/ (Cursor Injection) # # Grant or revoke dba permission to unprivileged us ...

#!/usr/bin/perl # # rawlabmindcreationscom/codes/exp/oracle/sys-lt-findricsetpl # # Oracle SYSLTFINDRICSET exploit (11g/10g) # # Grant or revoke dba permission to unprivileged user # # Tested on "Oracle Database 10g Enterprise Edition Release 101050" # # Fixed with CPU Oct 2007 # # REF: Thanks to Joxean Koret and his excelle ...

CWE-89 http://www.securitytracker.com/id?1018823 http://secunia.com/advisories/27251 http://www.securityfocus.com/bid/26098 http://secunia.com/advisories/27409 http://securityreason.com/securityalert/3245 http://osvdb.org/40079 http://www.vupen.com/english/advisories/2007/3524 http://marc.info/?l=bugtraq&m=119332677525918&w=2 http://www.vupen.com/english/advisories/2007/3626 https://www.exploit-db.com/exploits/4572 https://www.exploit-db.com/exploits/4571 https://www.exploit-db.com/exploits/4570 http://www.securityfocus.com/archive/1/482429/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/4572/

CVE-2007-5511

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect