The Intermedia application in Oracle 10g release 1 and 2 is vulnerable to SQL injection.

http://www.securiteam.com/securitynews/6U00L0AK0S.html