EIP-2026-103799
PRE-CVEOracle 10g - SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL / SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103799. PoCs published by Joxean Koret.
AI-analyzed exploit summary This exploit leverages SQL injection in Oracle10g's DBMS_CDC_IMPDP.BUMP_SEQUENCE procedure to inject malicious SQL commands, granting elevated privileges (DBA) to the attacker. The payload manipulates the SEQUENCE_NAME parameter to execute arbitrary SQL, specifically inserting a privileged entry into sys.sysauth$.
Description
Oracle 10g - SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL / SQL Injection
Exploits (1)
This exploit leverages SQL injection in Oracle10g's DBMS_CDC_IMPDP.BUMP_SEQUENCE procedure to inject malicious SQL commands, granting elevated privileges (DBA) to the attacker. The payload manipulates the SEQUENCE_NAME parameter to execute arbitrary SQL, specifically inserting a privileged entry into sys.sysauth$.