The second in a series of two articles on Oracle security was features over at Database Journal back in December 2007.  Take a look at Eight Ways To Hack Oracle Part 2.