EIP-2026-103797

PRE-CVE

Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (1)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103797. PoCs published by sh2kerr.

AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in Oracle 10g's SYS.LT.COMPRESSWORKSPACETREE function to grant DBA privileges to a user and execute OS commands via the DBMS_SCHEDULER. It demonstrates privilege escalation and remote command execution.

Description

Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (1)

Exploits (1)

exploitdb WORKING POC VERIFIED

by sh2kerr · textlocalmultiple

https://www.exploit-db.com/exploits/7677

View Code ZIP pw:eip

This exploit leverages a SQL injection vulnerability in Oracle 10g's SYS.LT.COMPRESSWORKSPACETREE function to grant DBA privileges to a user and execute OS commands via the DBMS_SCHEDULER. It demonstrates privilege escalation and remote command execution.

Classification

Working Poc 100%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Oracle Database 10g (10.1.0.5.0)

Auth required

Prerequisites: Access to an Oracle 10g database account with sufficient privileges to execute the SYS.LT.COMPRESSWORKSPACETREE function

MITRE ATT&CK

T1189 - Drive-by Compromise T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026