CVE-2008-3984

Related Files

Oracle DB SQL Injection Via SYS.LT.REMOVEWORKSPACE

Posted Aug 31, 2024

Authored by Jay Turla | Site metasploit.com

This Metasploit module exploits a sql injection flaw in the REMOVEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability.

tags | exploit, sql injection

advisories | CVE-2008-3984

SHA-256 | 27f5ae57e22ed3cfd2e38c06ca48a65e3dfb8c76f9cc56d51d4721d34c60da9c

Download | Favorite | View

shatter-workspace.txt

Posted Nov 14, 2008

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - Oracle Database provides the "LT" PL/SQL package that is part of the Oracle Workspace Manager component. This package has multiple instances of SQL Injection in COMPRESSWORKSPACETREE, MERGEWORKSPACE and REMOVEWORKSPACE procedures.

tags | advisory, sql injection

advisories | CVE-2008-3982, CVE-2008-3983, CVE-2008-3984

SHA-256 | 46972c6b9e06e4bc4b703ab2962224b03b0e54bbdc772217823fb7beae043812

Download | Favorite | View