RE: DB2 and Oracle with SQL injection

[Shao Jiangning-FGCP189 <jiang-ning.shao () motorola com>]

Here are some nice paper about Oracle SQL injection
http://www.securityfocus.com/infocus/1714

Shao

-----Original Message-----
From: fr0stman [mailto:fr0stman () sun-tzu-security net] 
Sent: Wednesday, August 13, 2003 11:06 PM
To: webappsec () securityfocus com
Subject: DB2 and Oracle with SQL injection


Hi all,

I was curious if any of you have ran across good documents on default 
tablespaces, etc to enumerate in DB2 or Oracle when using SQL injection. Or 
just good SQL injection papers on those databases. There's tons o data on 
MSSQL but not much covering the other two that are fairly widespread that I 
have happened across anyhow. 

Thanks in advance,

-- fr0stman --