Hey all,
I've just written a paper detailing a fairly common PL/SQL programming error 
related to cursors that leads to a new class of vulnerability in Oracle. You 
can get a copy of the paper from http://www.databasesecurity.com/ . 
Cheers,
David Litchfield
NGSSoftware Ltd
+44(0) 208 401 0070
http://www.ngssoftware.com/