Archive · 3 March 2007

SQL injection? No, Cursor injection

Written 19 years ago. Oracle APEX has moved on a lot since; check the current Oracle APEX posts too.

Just came across a paper called “Cursor Injection - A New Method for Exploiting PL/SQL Injection and Potential Defences” of David Litchfield.

It shows once more that writing proper code is important, as is getting your database to the right patch level.

--
Off topic: Carl Backstrom blogged about a music clip called “Code Monkey” here. You should see it, it’s fantastic!
--

Originally published on Blogspot.

Comments