[
From vnunet]
Database security researcher David Litchfield with NGS Software claims to have discovered a new class of security flaws affecting Oracle databases.
The flaw could allow attackers to launch a SQL injection attack or steal confidential information.
The article continues at
http://www.vnunet.com/vnunet/news/2169668/oracle-database-hit-class