{"vulnerability": "CVE-2007-5511", "sightings": [{"uuid": "546724ae-62bc-42d9-9366-ba27b667d3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-5511", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "237bdc7f-f2a8-479b-be27-28788fdc7c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-5511", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:26.000000Z"}, {"uuid": "70712974-b8ad-42e5-ad05-29e0fc1328ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-5511", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/lt_findricset_cursor.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6825993b-0ac9-4c56-92aa-722500c3c0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-5511", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/lt_findricset_cursor.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"CG \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will escalate an Oracle DB user to DBA by exploiting\\n          a sql injection bug in the SYS.LT.FINDRICSET package via Evil\\n          Cursor technique. Tested on oracle 10.1.0.3.0 -- should work on\\n          thru 10.1.0.5.0 and supposedly on 11g. Fixed with Oracle Critical\\n          Patch update October 2007.\", \"disclosure_date\": \"2007-10-17\", \"fullname\": \"auxiliary/sqli/oracle/lt_findricset_cursor\", \"is_install_path\": true, \"mod_time\": \"2025-05-10 16:11:25 +0000\", \"name\": \"Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/sqli/oracle/lt_findricset_cursor.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"sqli/oracle/lt_findricset_cursor\", \"references\": [\"CVE-2007-5511\", \"OSVDB-40079\", \"BID-26098\", \"URL-http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2007.html\"], \"rport\": 1521, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:15.281941Z"}]}