Is DB2 suceptible to SQL Injection as other databases are, for example Oracle and SQL Server? Does it allow compound/multiple statements separated by a semicolon?

Thanks.

Greg