Back
CVE-2005-1178
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.
Published: May 2, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (7)
| Vendor | Product | Version |
|---|---|---|
| oracle | forms | 3.0 |
| oracle | forms | 4.5 |
| oracle | forms | 5.0 |
| oracle | forms | 6.0 |
| oracle | forms | 6i |
| oracle | forms | 9i |
| oracle | forms | 10g |
GitHub Security Advisory GHSA-h4wc-w4rm-xv89
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL...
References (6)
- http://www.red-database-security.com/wp/sql_injection_forms_us.pdf Vendor Advisory
- http://www.securiteam.com/securitynews/5HP0I0UFFI.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20080
- http://www.red-database-security.com/wp/sql_injection_forms_us.pdf Vendor Advisory
- http://www.securiteam.com/securitynews/5HP0I0UFFI.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20080
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.74%
Top 24% most likely to be exploited
Threat Score
30.5 / 100
Data Sources
NVD
EPSS
GitHub