Alexander Kornbrust Oracle Security Blog

The first exploits for CPU January 2008 were published on milw0rm.com.

Alexandr Polyakov from Digital Security published 4 exploits for XMLDB. Alexandr found and reported these vulnerabilities mid of december 2007 to Oracle. It seems that someone else reported these errors before because Oracle NEVER fixes vulnerabilities within less than a month.

• SQL Injection in PITRIG_DROP (1)
• SQL Injection in PITRIG_DROP (2)
• SQL Injection in PITRIG_TRUNCATE (1)
  
• SQL Injection in PITRIG_TRUNCATE (2)
  

This entry was posted on Donnerstag, Januar 31st, 2008 at 16:29 and is filed under Exploit, SQL Injection. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.