WebApp Sec mailing list archives

Re: about oracle sql injection


From: Richard Moore <rich () westpoint ltd uk>
Date: Wed, 30 Nov 2005 11:57:45 +0000



limor188 () walla co il wrote:
1)Does anyone know a quick way to get all the column types without
cycling through manually as that will take 2^22 requests atleast?

Use the V$XX tables like V$ALL_TABLES etc. (you need to have
found a varchar2 column first of course).

Rich.
--
Richard Moore, Principal Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031


Current thread: