EIP-2026-104025

This Perl script exploits a cursor injection vulnerability in Oracle Database 10g (CVE-2007-126999) to grant or revoke DBA privileges to an unprivileged user. It leverages the KUPM$MCP.MAIN procedure and DBMS_SQL.OPEN_CURSOR to execute arbitrary SQL commands without requiring CREATE PROCEDURE privileges.