CVE-2007-5766 in E-Business Suiteinfo

Summary

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

10/31/2007

Disclosure

11/08/2007

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Interested in the pricing of exploits?

See the underground prices here!