CVE-2008-3983

Related Files

Oracle DB SQL Injection Via SYS.LT.MERGEWORKSPACE

Posted Aug 31, 2024

Authored by Jay Turla | Site metasploit.com

This Metasploit module exploits a sql injection flaw in the MERGEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability.

tags | exploit, sql injection

advisories | CVE-2008-3983

SHA-256 | 25265a201b6de9b641b309ca9d9e2f86d75f62ec4113d2e80983a1052506dbe8

Download | Favorite | View

shatter-workspace.txt

Posted Nov 14, 2008

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - Oracle Database provides the "LT" PL/SQL package that is part of the Oracle Workspace Manager component. This package has multiple instances of SQL Injection in COMPRESSWORKSPACETREE, MERGEWORKSPACE and REMOVEWORKSPACE procedures.

tags | advisory, sql injection

advisories | CVE-2008-3982, CVE-2008-3983, CVE-2008-3984

SHA-256 | 46972c6b9e06e4bc4b703ab2962224b03b0e54bbdc772217823fb7beae043812

Download | Favorite | View