[Previous entry: "Look before you leap..."] [Next entry: "Lateral SQL Injection Revisited - No Special Privs Required"]

07/15/2008: "Oracle have released a Critical Patch Update"

Oracle has released a critical patch update. This update fixes a number of serious issues including a Oracle Application Server PLSQL injection flaw I found in October 2007.

This flaw will serve as an excellent example for my upcoming Hacking Oracle PLSQL training course at Blackhat in Vegas this August.