Bugtraq mailing list archives
Re: Oracle WebDb engine brain-damagse
From: Michal Zalewski <lcamtuf () DIONE IDS PL>
Date: Fri, 22 Dec 2000 11:46:56 +0100
On Fri, 22 Dec 2000, Michal Zalewski wrote:
I believe you can do at least one of these possibilities: - SELECT <pattern> INTO <sth> FROM <table> to move sensitive data from some private table to publicly available tables used eg. for direct contents rendering,
This one should work fine...
- call WebDB output procedures to produce output (you can use full PL/SQL language syntax, including loops, declarations etc).
This one as well. I've just checked, no problems: you can call owa_util.tableprint(...) and other output procedures :) -- _______________________________________________________ Michal Zalewski [lcamtuf () tpi pl] [tp.internet/security] [http://lcamtuf.na.export.pl] <=--=> bash$ :(){ :|:&};: =--=> Did you know that clones never use mirrors? <=--=
Current thread:
- Oracle WebDb engine brain-damagse Michal Zalewski (Dec 20)
- <Possible follow-ups>
- Re: Oracle WebDb engine brain-damagse Michal Zalewski (Dec 20)
- Re: Oracle WebDb engine brain-damagse McAllister, Andrew (Dec 20)
- Re: Oracle WebDb engine brain-damagse Michal Zalewski (Dec 22)
- Re: Oracle WebDb engine brain-damagse sporty o'one (Dec 22)
- Re: Oracle WebDb engine brain-damagse Michal Zalewski (Dec 22)
- Re: Oracle WebDb engine brain-damagse Michal Zalewski (Dec 22)
- Re: Oracle WebDb engine brain-damagse Kuznetsov, Vasily (Dec 21)