EDB-3363

functional

Oracle 9i/10g - DBMS_METADATA.GET_DDL SQL Injection

view exploit source exploit_dbverifiedtype remoteauthor bunkerpublished 2007-02-23catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2006-0549US	high7.5	8.48% (95th)	Exploit	2006-02-04
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL comma…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.