Back to search
CVE-2007-3860
Published: Jul 18, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for '"' characters.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
SSRT061201
vendor-advisory
x_refsource_HP
26114
third-party-advisory
x_refsource_SECUNIA
2901
third-party-advisory
x_refsource_SREASON
26166
third-party-advisory
x_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
x_refsource_CONFIRM
oracle-apex-sql-injection(35499)
vdb-entry
x_refsource_XF
TA07-200A
third-party-advisory
x_refsource_CERT
ADV-2007-2562
vdb-entry
x_refsource_VUPEN
ADV-2007-2635
vdb-entry
x_refsource_VUPEN
HPSBMA02133
vendor-advisory
x_refsource_HP
oracle-cpu-july2007(35490)
vdb-entry
x_refsource_XF
1018415
vdb-entry
x_refsource_SECTRACK
20070718 Oracle Security: SQL Injection in APEX CHECK_DB_PASSWORD
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now