Oracle Reports SQL injection

2005-09-1500:00:00

REDDATABASESEC

vulners.com

It's possible to inject SQL to report if it uses lexical references without parameter validation.

CPENameOperatorVersion
oracle reportseq2.0

CPE	Name	Operator	Version
	oracle reports	eq	2.0

References

vulners.com/securityvulns/securityvulns:doc:9722