CVE:CVE-2007-2113
CNNVD:CNNVD-200704-323
Oracle Database的Upgrade/Downgrade组件(DBMS_UPGRADE_INTERNAL)中存在SQL注入漏洞。远程认证用户可以借助未知向量，执行任意的SQL指令。又称DB07。
solution:Upgrade oracle database_server to a higher version than 10.1.0.5,and avoid the version 10.1.0.5