Oracle SQL injection lateral attacks

SQL injection into uncontrolled PL/SQL procedires is possible with e.g. modification of data format with ALTER SESSION...