Bugtraq mailing list archives

Re: Oracle WebDb engine brain-damagse


From: Michal Zalewski <lcamtuf () DIONE IDS PL>
Date: Fri, 22 Dec 2000 11:46:56 +0100

On Fri, 22 Dec 2000, Michal Zalewski wrote:

I believe you can do at least one of these possibilities:

- SELECT <pattern> INTO <sth> FROM <table> to move sensitive data
  from some private table to publicly available tables used eg. for
  direct contents rendering,

This one should work fine...

- call WebDB output procedures to produce output (you can use full
  PL/SQL language syntax, including loops, declarations etc).

This one as well. I've just checked, no problems: you can call
owa_util.tableprint(...) and other output procedures :)

--
_______________________________________________________
Michal Zalewski [lcamtuf () tpi pl] [tp.internet/security]
[http://lcamtuf.na.export.pl] <=--=> bash$ :(){ :|:&};:
=--=> Did you know that clones never use mirrors? <=--=


Current thread: