EIP-2026-103800

This SQL injection exploit targets Oracle 10g R1 by leveraging the XDB.XDB_PITRIG_PKG.PITRIG_DROP procedure to execute arbitrary SQL commands. It creates a malicious function to extract password hashes from DBA_USERS and stores them in a table controlled by the attacker.