sql injection attack querying the database type and version on oracle