Cursor Injection in PL/SQL

http://www.databasesecurity.com/dbsec/cursor-injection.pdf