| Package | Affected versions | Patched versions |
|---|---|---|
| database server | = 10.2.1 | |
| oracle9i | = 9.0= 9.0.1= 9.0.1.2= 9.0.1.3= 9.0.1.4= 9.0.2= 9.0.2.0.0= 9.0.2.0.1= 9.0.2.1= 9.0.2.2= 9.0.2.3= 9.2.0.1= 9.2.0.2 |
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free