Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit v2

No description provided by source. !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to...

CVE-2006-7067

Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with invalid arguments. NOTE: this issue was originally disputed by a third party, but the dispute was retracted. NOTE: this iss...

CVE-2006-7067

CVE-2006-7067 affects Oracle 10g R2 (and possibly other versions). The vulnerability arises when an attacker can issue an invalid ALTER SESSION SET EVENTS command, which may trigger internal errors and potentially cause other impacts as described in the description. The connected documents do not...

Oracle 10g KUPV$FT.ATTACH_JOB - SQL Injection (2)

Oracle 10g KUPV$FT.ATTACHJOB - SQL Injection 2 !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged...

Oracle 10g - KUPW$WORKER.MAIN SQL Injection (2)

Oracle 10g - KUPW$WORKER.MAIN SQL Injection 2 !/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged...

Oracle 10g KUPV$FT.ATTACH_JOB SQL Injection Exploit v2

Exploit for multiple platform in category remote exploits ====================================================== Oracle 10g KUPV$FT.ATTACHJOB SQL Injection Exploit v2 ====================================================== !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - Ne...

Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (2)

source: https://www.securityfocus.com/bid/13236/info Oracle database is prone to an SQL-injection vulnerability because the software fails to properly sanitize user-supplied data. The 'SUBSCRIPTIONNAME' parameter is vulnerable. Packages that employ this parameter execute with 'SYS' user privilege...

Oracle 10g KUPV$FT.ATTACH_JOB - SQL Injection (2)

!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise...

Oracle 10g KUPW$WORKER.MAIN SQL Injection Exploit v2

Exploit for multiple platform in category remote exploits ==================================================== Oracle 10g KUPW$WORKER.MAIN SQL Injection Exploit v2 ==================================================== !/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g - Version 2 - New "evi...

Oracle 9i10g DBMS_METADATA.GET_DDL - SQL Injection (2)

Oracle 9i10g DBMSMETADATA.GETDDL - SQL Injection 2 !/usr/bin/perl Remote Oracle DBMSMETADATA.GETDDL exploit 9i/10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to...

Oracle 9i/10g ACTIVATE_SUBSCRIPTION - SQL Injection (2)

!/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Tested on "Oracle...

oracledmgd-sql.txt

!/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com...

oraclekupv-perm.txt

!/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/440439 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com...

oracleaj-perm.txt

!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE:...

oracleas-sql.txt

!/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/396133 AUTHOR: Andrea "bunker" Purificato...

Oracle 9i/10g - DBMS_METADATA.GET_DDL SQL Injection

!/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com...

Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (1)

source: https://www.securityfocus.com/bid/13236/info Oracle database is prone to an SQL-injection vulnerability because the software fails to properly sanitize user-supplied data. The 'SUBSCRIPTIONNAME' parameter is vulnerable. Packages that employ this parameter execute with 'SYS' user privilege...

Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit

Exploit for unknown platform in category remote exploits ========================================================= Oracle 9i/10g ACTIVATESUBSCRIPTION SQL Injection Exploit ========================================================= !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

Exploit for multiple platform in category remote exploits ========================================================= Oracle 9i/10g DBMSMETADATA.GETDDL SQL Injection Exploit ========================================================= !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Gran...

Oracle 10g - KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission

!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE...