TUCoPS :: Oracle :: tb13220.htm

TUCoPS :: Oracle :: tb13220.htm
Oracle E-Business Suite SQL Injection Vulnerability
ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability
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