CVE-2003-1193
Summary
| CVE | CVE-2003-1193 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2003-11-03 05:00:00 UTC |
| Updated | 2017-07-11 01:29:00 UTC |
| Description | Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Application Server Portal | 3.0.9.8.5 | All | All | All |
| Application | Oracle | Application Server Portal | 9.0.2.3 | All | All | All |
| Application | Oracle | Application Server Portal | 9.0.2.3a | All | All | All |
| Application | Oracle | Application Server Portal | 9.0.2.3b | All | All | All |
| Application | Oracle | Application Server Portal | 3.0.9.8.5 | All | All | All |
| Application | Oracle | Application Server Portal | 9.0.2.3 | All | All | All |
| Application | Oracle | Application Server Portal | 9.0.2.3a | All | All | All |
| Application | Oracle | Application Server Portal | 9.0.2.3b | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.0.0 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.1 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.2 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.3 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.0.0 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.1 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.2 | All | All | All |
| Application | Oracle | Oracle9i | 9.0.2.3 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus HOME Mailing List: BugTraq | BUGTRAQ | www.securityfocus.com | Patch, Vendor Advisory |
| Oracle9iAS Portal Component SQL Injection Vulnerability | BID | www.securityfocus.com | Vendor Advisory |
| Technical Resources | Oracle | CONFIRM | otn.oracle.com | Patch |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.