EIP-2026-103800

PRE-CVE

Oracle 10g R1 - 'pitrig_drop' Get Users Hash / PL/SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103800. PoCs published by sh2kerr.

AI-analyzed exploit summary This SQL injection exploit targets Oracle 10g R1 by leveraging the XDB.XDB_PITRIG_PKG.PITRIG_DROP procedure to execute arbitrary SQL commands. It creates a malicious function to extract password hashes from DBA_USERS and stores them in a table controlled by the attacker.

Description

Oracle 10g R1 - 'pitrig_drop' Get Users Hash / PL/SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by sh2kerr · localmultiple

https://www.exploit-db.com/exploits/4994

View Code ZIP pw:eip

This SQL injection exploit targets Oracle 10g R1 by leveraging the XDB.XDB_PITRIG_PKG.PITRIG_DROP procedure to execute arbitrary SQL commands. It creates a malicious function to extract password hashes from DBA_USERS and stores them in a table controlled by the attacker.

Classification

Working Poc 100%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Oracle 10g R1 (10.1.0.2.0)

Auth required

Prerequisites: Valid Oracle database credentials · Access to execute XDB package procedures

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026