CVE-2008-3982

Related Files

Oracle DB SQL Injection Via SYS.LT.COMPRESSWORKSPACE

Posted Aug 31, 2024

Authored by Jay Turla | Site metasploit.com

This Metasploit module exploits an sql injection flaw in the COMPRESSWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability.

tags | exploit, sql injection

advisories | CVE-2008-3982

SHA-256 | 8d3bbc62256bcef0370fd324d79badfe6dada95158c7b728fcf20137808677d2

Download | Favorite | View

shatter-workspace.txt

Posted Nov 14, 2008

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - Oracle Database provides the "LT" PL/SQL package that is part of the Oracle Workspace Manager component. This package has multiple instances of SQL Injection in COMPRESSWORKSPACETREE, MERGEWORKSPACE and REMOVEWORKSPACE procedures.

tags | advisory, sql injection

advisories | CVE-2008-3982, CVE-2008-3983, CVE-2008-3984

SHA-256 | 46972c6b9e06e4bc4b703ab2962224b03b0e54bbdc772217823fb7beae043812

Download | Favorite | View