AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-7138

MEDIUM · CVSS 6 EPSS 1.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-03-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2006-7138
Severity
MEDIUM
CVSS
6
EPSS
1.28%
Oracle

Original NVD Description

SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modifying the P_LOV parameter and calculating a matching MD5 checksum for the P_LOV_CHECKSUM parameter. NOTE: it is likely that this issue is subsumed by CVE-2006-5351, but due to lack of details from Oracle, this cannot be proven.