EIP-2026-103801

This exploit leverages a SQL injection vulnerability in Oracle 10g R1 via the XDB.XDB_PITRIG_PKG.PITRIG_TRUNCATE procedure to extract password hashes from the DBA_USERS table. It creates a malicious function to dump credentials into a controlled table and triggers the injection via a crafted input string.