CVE-2006-7141
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-7141
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such as (1) utl_file.put_line and (2) utl_file.get_line, a related issue to CVE-2005-0701. NOTE: this issue is disputed by third parties who state that this is due to an insecure configuration instead of an inherent vulnerability
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Oracle Database Server 绝对路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
**有争议的** Oracle Database Server中存在绝对路径遍历漏洞。当utl_file_dir被设置成外卡值或"创建任意目录到公开"特权存在时，远程认证用户可以借助对utl_file函数的全文件路径，比如(1)utl_file.put_line和(2)utl_file.get_line，读取和修改任意文件。该漏洞与CVE-2005-0701有关。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-7141
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-7141
Please Login to view more intelligence information
- http://www.0xdeadbeef.info/exploits/raptor_orafile.sqlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2006-7141
Same Patch Batch · n/a · 2007-03-07 · 60 CVEs total
| CVE-2007-1290 | Tyger Bug Tracking System ViewReport.php SQL注入漏洞 | |
| CVE-2007-1308 | KDE JavaScript ecma/kjs_html.cpp 拒绝服务漏洞 | |
| CVE-2007-1305 | Sava's Guestbook add2.php 多个跨站脚本攻击漏洞 | |
| CVE-2007-1304 | Sava's Guestbook add2.php SQL注入漏洞 | |
| CVE-2007-1303 | RRDBrowse rb.cgi 目录遍历漏洞 | |
| CVE-2007-1306 | Asterisk畸形SIP消息远程拒绝服务漏洞 | |
| CVE-2007-1294 | DivX Web Player NPDIVX32.DLL ActiveX 控件远程拒绝服务漏洞 | |
| CVE-2007-1293 | Rigter Portal System Categoria Index.PHP SQL注入漏洞 | |
| CVE-2007-1292 | VBulletin Inlinemod.PHP SQL注入漏洞 | |
| CVE-2007-1291 | Tyger Bug Tracking System 多个跨站脚本攻击漏洞 | |
| CVE-2007-1295 | AJ Forum topic_title.php SQL注入漏洞 | |
| CVE-2007-1289 | Tyger Bug Tracking System ViewBugs.php SQL注入漏洞 | |
| CVE-2007-1288 | Webmobo WB News 多个PHP远程文件包含漏洞 | |
| CVE-2006-7137 | Tinyportal shoutbox 跨站脚本攻击漏洞 | |
| CVE-2006-7136 | PHP Poll Creator 多个远程文件包含漏洞 | |
| CVE-2006-7135 | PHP Poll Creator(phpPC) "lib/functions.inc.php"远程文件包含漏洞 | |
| CVE-2006-7161 | HazirSite Giris_Yap.ASP SQL注入漏洞 | |
| CVE-2006-7160 | Outpost Firewall PRO Sandbox.sys驱动 多个本地拒绝服务漏洞 | |
| CVE-2006-7159 | BtitTracker "include/prune_torrents.php"任意文件删除漏洞 | |
| CVE-2006-7158 | Oracle 应用程序表达(APEX) 跨站脚本攻击漏洞 |
Showing top 20 of 60 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2006-7141
No comments yet