CVE-2005-2293

Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.

• CWE-459

• http://marc.info/?l=bugtraq&m=112129452232307&w=2Exploit, Mailing List
• http://secunia.com/advisories/15991/Broken Link, Patch, Vendor Advisory
• http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.htmlBroken Link, Patch, Vendor Advisory
• http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21343Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=112129452232307&w=2Exploit, Mailing List
• http://secunia.com/advisories/15991/Broken Link, Patch, Vendor Advisory
• http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.htmlBroken Link, Patch, Vendor Advisory
• http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21343Third Party Advisory, VDB Entry

Published

Jul 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2287SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to…
• CVE-2005-2288Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 a…
• CVE-2005-2289PHPCounter 7.2 allows remote attackers to obtain sensitive i…
• CVE-2005-2290wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote at…
• CVE-2005-2291Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleart…
• CVE-2005-2292Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext …
• CVE-2005-2294Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large numb…
• CVE-2005-2295NetPanzer 0.8 and earlier allows remote attackers to cause a…
• CVE-2005-2296YabbSE 1.5.5c allows remote attackers to obtain sensitive in…
• CVE-2005-2297Stack-based buffer overflow in TreeAction.do in Sybase EASer…
• CVE-2005-2298BitDefender Engine 1.6.1 and earlier does not properly scan …
• CVE-2005-2299Multiple cross-site scripting (XSS) vulnerabilities in Simpl…