Now, by default, ODAT checks if the CVE-2012-3137 is exploitable (thanks to VPU for the idea :)).
For example, --test-module will capture an authentication session and will use credentials given by the user to check automatically if the result is good (==> database vulnerable)
Need to be root to capture an authentication to the database.