>Of course, Oracle is immune to all vulnerabilities... NOT!
>
>http://www.oracle.com/technology/deploy/security/pdf/2003alert61.pdf
>http://www.computerworlduk.com/management/security/cybercrime/news/index.cfm?newsid=6106
>
>And if you don't know how to attack a Oracle database, Oracle itself will show you how to do it:
>http://www.securitypronews.com/news/securitynews/spn-45-20060412OracleSlipsHowToAttackOwnDatabases.html
>
>>These links say it all:
>>
>>http://www.informationweek.com/news/showArticle.jhtml;jsessionid=Z1O1GX5OZ4VR4QSNDLRSKHSCJUNN2JVN?articleID=205600157
>>
>>http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9055858&intsrc=hm_list

I am not stating that Oracle not vulnerable to attack but if it is as vulnerable as SQL Server then why do all the large-scale SQL injection attacks seem to happen to SQL Server?