ID de Prueba:	1.3.6.1.4.1.25623.1.0.11918
Categoría:	Web application abuses
Título:	Oracle 9iAS PORTAL_DEMO ORG_CHART
Resumen:	In your installation of Oracle 9iAS, it is possible to access; a demo (PORTAL_DEMO.ORG_CHART) via mod_plsql. Access to these pages should; be restricted, because it may be possible to abuse this demo for; SQL Injection attacks.
Descripción:	Summary: In your installation of Oracle 9iAS, it is possible to access a demo (PORTAL_DEMO.ORG_CHART) via mod_plsql. Access to these pages should be restricted, because it may be possible to abuse this demo for SQL Injection attacks. Solution: Remove the Execute for Public grant from the PL/SQL package in schema PORTAL_DEMO (REVOKE execute ON portal_demo.org_chart FROM public, ). Please check also Oracle Security Alert 61 for patch-information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1193 BugTraq ID: 8966 http://www.securityfocus.com/bid/8966 Bugtraq: 20031105 Multiple SQL Injection Vulnerabilities in Oracle Application Server 9i and RDBMS (#NISR05112003) (Google Search) http://www.securityfocus.com/archive/1/343520 XForce ISS Database: oracle-portal-sql-injection(13593) https://exchange.xforce.ibmcloud.com/vulnerabilities/13593
Copyright	Copyright (C) 2003 Frank Berger

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.