exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

Oracle 10g SYS.LT.MERGEWORKSPACE SQL Injection Exploit

Posted Jan 7, 2009

Authored by Sh2kerr | Site dsecrg.com

Oracle 10g SYS.LT.MERGEWORKSPACE SQL injection exploit that grants DBA access and creates a new user.

tags | exploit, sql injection

SHA-256 | b65150ef13b30d9109725e159bd6bdfdf6423220d0ca97792f5eb9706fc36b23

Download | Favorite | View

Related Files

shatter-workspace.txt

Posted Nov 14, 2008

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - Oracle Database provides the "LT" PL/SQL package that is part of the Oracle Workspace Manager component. This package has multiple instances of SQL Injection in COMPRESSWORKSPACETREE, MERGEWORKSPACE and REMOVEWORKSPACE procedures.

tags | advisory, sql injection

advisories | CVE-2008-3982, CVE-2008-3983, CVE-2008-3984

SHA-256 | 46972c6b9e06e4bc4b703ab2962224b03b0e54bbdc772217823fb7beae043812

Download | Favorite | View