Re: ORACLE SQL Injection Question

[Cesar <cesarc56 () yahoo com>]

Hi.

Take a look here, many cool papers and articles:
http://www.petefinnigan.com/orasec.htm

Cesar.
--- Mike Rauch <michaelraouch () yahoo com> wrote:
> Hello,
> I'm performing an assesment on one of our web
> applications (black box type) and I came acrooss two
> interesting error messages from an Oracle DB when I
> supply a 'SELECT statement. The messages are:
>  a)  ORA-00933 SQL Command not properly ended
>  b)  ORA-00917 Missing comma
>
> I tried various formats to form an SQL statment that
> can be parsed but no success.
>
> Does anyone can shed any light as to what I may be
> able to try?
>
> Thanks !
>
> Mike 
>
> __________________________________
> Do you Yahoo!?
> Exclusive Video Premiere - Britney Spears
> http://launch.yahoo.com/promos/britneyspears/


__________________________________
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree