Oracle 10g Release 1 is susceptible to SQL injection flaws due to the SYS.KUPW$WORKER package.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48401/oracle-SYS.KUPW.txt
Source: https://packetstormsecurity.com/files/48401/oracle-SYS.KUPW.txt.html