EIP-2026-104032

This exploit demonstrates an SQL injection vulnerability in Oracle E-Business Suite Financials by crafting malicious SQL queries via the 'query' parameter in 'jtfwcpnt.jsp'. The PoC shows how an attacker can execute arbitrary SQL commands, such as granting DBA privileges or deleting records, without authentication.