SqlInjection

[mystic-d]

hey
someone is aware of SqlInjection attack on Oracle database ver 10g R2 with unprivilege user (or a minimal privilege) ?
thanks !

[Amahdy]

you want documentations or just how to fix bugs ... I recived don't remember when, an email telling me that oracle has fixed 65 injection bugs in 10g you can find updates at oracle website .

[mystic-d]

i need documention (or poc)..
i know that 10g is very vulnurable, but im looking for something very specific.. 10gR2 with unprivilege user..
thanks

[Hack]

Here are a bunch of links on this subject.

http://www.google.com/search?hl=en&q=sql+injection+attacks+oracle+10gR2

[Peter_APIIT]

Limit the unprivilieged user usgae before you can find a solution.

[Hack]

Why would an unpriviledged user have any usage at all?