Oracle SQL Injection in web applications: Common SQL Injection Strings for Oracle Databases

http://www.red-database-security.com/whitepaper/oracle_sql_injection_web.html