RE: DB2 and Oracle with SQL injection

Here are some nice paper about Oracle SQL injection http://www.securityfocus.com/infocus/1714

Shao

-----Original Message-----
From: fr0stman [mailto:fr0stman@sun-tzu-security.net] Sent: Wednesday, August 13, 2003 11:06 PM To: webappsec@securityfocus.com
Subject: DB2 and Oracle with SQL injection

Hi all,

I was curious if any of you have ran across good documents on default tablespaces, etc to enumerate in DB2 or Oracle when using SQL injection. Or just good SQL injection papers on those databases. There's tons o data on MSSQL but not much covering the other two that are fairly widespread that I have happened across anyhow.

Thanks in advance,

• fr0stman --