{"uuid": "29e847b6-272b-4756-a273-453cc3991b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-3600", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/oracle/client_system_analyzer_upload.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"1c239c43f521145fa8385d64a9c32243\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload vulnerability on the Client\\n          Analyzer component as included in Oracle Database 11g, which allows remote\\n          attackers to upload and execute arbitrary code. This module has been tested\\n          successfully on Oracle Database 11g 11.2.0.1.0 on Windows 2003 SP2, where execution\\n          through the Windows Management Instrumentation service has been used.\", \"disclosure_date\": \"2011-01-18\", \"fullname\": \"exploit/windows/oracle/client_system_analyzer_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"Oracle Database Client System Analyzer Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/oracle/client_system_analyzer_upload.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/oracle/client_system_analyzer_upload\", \"references\": [\"CVE-2010-3600\", \"OSVDB-70546\", \"BID-45883\", \"ZDI-11-018\", \"URL-http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html\"], \"rport\": 1158, \"session_types\": false, \"targets\": [\"Oracle Oracle11g 11.2.0.1.0 / Windows 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:26.579930Z"}