Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2006-5333

Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session" privileges, aka Vuln# DB02. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block.

  • Published: Oct 18, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-5333
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.1
  • AV:N/AC:H/Au:S/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
oracle / database_server 10.2.0.2 10.2.0.2.x