Differences in Vulnerability between Oracle and SQL Server