CVE-2007-5511

This exploit leverages a cursor injection vulnerability in Oracle's SYS.LT.FINDRICSET procedure to grant or revoke DBA privileges to an unprivileged user. It uses DBMS_SQL to execute arbitrary SQL commands without requiring CREATE PROCEDURE privileges.

This exploit leverages a vulnerability in Oracle's SYS.LT.FINDRICSET function to grant or revoke DBA privileges to an unprivileged user. It creates an autonomous transaction function to execute the privilege modification, bypassing standard permission checks.

This exploit leverages SQL injection in Oracle 10g's LT.FINDRICSET procedure to execute arbitrary SQL commands, granting DBA privileges to the 'scott' user. It uses base64 encoding to evade IDS detection.

This Metasploit module exploits a SQL injection vulnerability in Oracle DB's SYS.LT.FINDRICSET package via an Evil Cursor technique to escalate privileges to DBA. It leverages DBMS_SQL to execute arbitrary SQL commands, tested on Oracle 10.1.0.3.0 through 10.1.0.5.0.