Metasploit modules that can be used to exploit Oracle » Database 11i

Order by Disclosure Date Module Name Module Type
  • Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACE
    Disclosure Date: 2008-10-22
    First seen: 2020-04-26
    auxiliary/sqli/oracle/lt_mergeworkspace
    This module exploits a sql injection flaw in the MERGEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. Authors: - CG <cg@carnal0wnage.com>
  • Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE
    Disclosure Date: 2008-10-22
    First seen: 2020-04-26
    auxiliary/sqli/oracle/dbms_cdc_publish
    The module exploits an sql injection flaw in the ALTER_AUTOLOG_CHANGE_SOURCE procedure of the PL/SQL package DBMS_CDC_PUBLISH. Any user with execute privilege on the vulnerable package can exploit this vulnerability. By default, users granted EXECUTE_CATALOG_ROLE have the required privilege. Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1. Fixed with October 2008 CPU. Authors: - MC <mc@metasploit.com>
  • Oracle DB SQL Injection via SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE
    Disclosure Date: 2008-10-22
    First seen: 2020-04-26
    auxiliary/sqli/oracle/dbms_cdc_ipublish
    The module exploits an sql injection flaw in the ALTER_HOTLOG_INTERNAL_CSOURCE procedure of the PL/SQL package DBMS_CDC_IPUBLISH. Any user with execute privilege on the vulnerable package can exploit this vulnerability. By default, users granted EXECUTE_CATALOG_ROLE have the required privilege. Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1. Fixed with October 2008 CPU. Authors: - MC <mc@metasploit.com>
  • Oracle DB SQL Injection via SYS.LT.COMPRESSWORKSPACE
    Disclosure Date: 2008-10-13
    First seen: 2020-04-26
    auxiliary/sqli/oracle/lt_compressworkspace
    This module exploits an sql injection flaw in the COMPRESSWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. Authors: - CG <cg@carnal0wnage.com>
  • Oracle DB SQL Injection via SYS.LT.REMOVEWORKSPACE
    Disclosure Date: 2008-10-13
    First seen: 2020-04-26
    auxiliary/sqli/oracle/lt_removeworkspace
    This module exploits a sql injection flaw in the REMOVEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. Authors: - Sh2kerr <research[ad]dsecrg.com>
5 metasploit modules found
Please note: Metasploit modules are only matched by CVE numbers. Visit metasploit web site for more details
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close