Oracle 9i Release 1 through 11g Release 1 suffer from a SQL injection vulnerability in the SDO_IDX package.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/65580/oraclesdoidx-sql.txt
Source: https://packetstormsecurity.com/files/65580/oraclesdoidx-sql.txt.html