Oracle 9i Release 1 through 10g Release 1 suffer from a SQL injection vulnerability in package DBMS_PRVTAQIS.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57841/oracle_sql_injection_dbms_prvtaqis.txt
Source: https://packetstormsecurity.com/files/57841/oracle_sql_injection_dbms_prvtaqis.txt.html