Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-08-04 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-1370
Mitre link : CVE-2004-1370
CVE.ORG link : CVE-2004-1370
JSON object : View
Products Affected
oracle
- enterprise_manager_grid_control
- oracle9i
- enterprise_manager
- collaboration_suite
- oracle8i
- e-business_suite
- application_server
- oracle10g
- enterprise_manager_database_control
CWE