{"vulnerability": "cve-2010-0866", "sightings": [{"uuid": "fbec1799-a2cc-40d8-8778-7b0e64078d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0866", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "d7937df6-2135-4471-a759-d06109231c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0866", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:45.000000Z"}, {"uuid": "fc502587-8337-4bd0-97cd-85937fdeeda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0866", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/jvm_os_code_11g.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "787e8c16-997a-43bc-9667-567e6fa08723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0866", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/jvm_os_code_10g.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c05d1be2-a435-4e65-9cbc-cdeb001a1bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0866", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/jvm_os_code_10g.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"sid \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a flaw (0 day) in DBMS_JVM_EXP_PERMS package that allows\\n          any user with create session privilege to grant themselves java IO privileges.\\n          Identified by David Litchfield. Works on 10g R2, 11g R1 and R2 (Windows only)\", \"disclosure_date\": \"2010-02-01\", \"fullname\": \"auxiliary/sqli/oracle/jvm_os_code_10g\", \"is_install_path\": true, \"mod_time\": \"2025-05-10 16:11:25 +0000\", \"name\": \"Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/sqli/oracle/jvm_os_code_10g.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"sqli/oracle/jvm_os_code_10g\", \"references\": [\"CVE-2010-0866\", \"OSVDB-62184\", \"URL-http://blackhat.com/html/bh-dc-10/bh-dc-10-archives.html#Litchfield\", \"URL-http://www.notsosecure.com/folder2/2010/02/04/hacking-oracle-11g/\"], \"rport\": 1521, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:15.010791Z"}, {"uuid": "a9c52aa7-1e0a-47db-9e01-7351008fb76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0866", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/jvm_os_code_11g.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"sid \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a flaw (0 day) in DBMS_JVM_EXP_PERMS package that allows\\n          any user with create session privilege to grant themselves java IO privileges.\\n          Identified by David Litchfield. Works on 11g R1 and R2 (Windows only).\", \"disclosure_date\": \"2010-02-01\", \"fullname\": \"auxiliary/sqli/oracle/jvm_os_code_11g\", \"is_install_path\": true, \"mod_time\": \"2025-05-10 16:11:25 +0000\", \"name\": \"Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/sqli/oracle/jvm_os_code_11g.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"sqli/oracle/jvm_os_code_11g\", \"references\": [\"CVE-2010-0866\", \"OSVDB-62184\", \"URL-http://blackhat.com/html/bh-dc-10/bh-dc-10-archives.html#Litchfield\", \"URL-http://www.notsosecure.com/folder2/2010/02/04/hacking-oracle-11g/\"], \"rport\": 1521, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:15.103063Z"}]}