EIP-2026-103802

PRE-CVE

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103802. PoCs published by sh2kerr.

AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in Oracle 10g R1's XDB.XDB_PITRIG_PKG.PITRIG_DROP procedure to execute arbitrary SQL commands, specifically changing the SYSTEM user's password. It uses an autonomous transaction to bypass standard security checks.

Description

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

Exploits (1)

exploitdb WORKING POC VERIFIED
by sh2kerr · localmultiple
https://www.exploit-db.com/exploits/4996

This exploit leverages a SQL injection vulnerability in Oracle 10g R1's XDB.XDB_PITRIG_PKG.PITRIG_DROP procedure to execute arbitrary SQL commands, specifically changing the SYSTEM user's password. It uses an autonomous transaction to bypass standard security checks.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Oracle 10g R1 (10.1.0.2.0)
Auth required
Prerequisites: Access to an Oracle 10g R1 database with sufficient privileges to execute the XDB.XDB_PITRIG_PKG.PITRIG_DROP procedure
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026