[Previous entry: "Exploiting CREATE ANY DIRECTORY to become a SYSDBA"] [Next entry: "PeteFinnigan.com Limited advisory for the October 2008 CPU released"]
A new paper on PL/SQL Injection
October 21st, 2008 by PetePaul Wright pointed out a new paper to me today about PL/SQL injection. The paper is called "Assault on Oracle PL/SQL - Injection". Beware of the profanity in the paper if you read it at work and because its written by a hacker it has the obligatory greetz etc.


