Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Useless payloads for Postgres Time Based SQL Injections #2

Closed
GoogleCodeExporter opened this issue Sep 10, 2015 · 1 comment
Closed

Useless payloads for Postgres Time Based SQL Injections #2

GoogleCodeExporter opened this issue Sep 10, 2015 · 1 comment
Labels
auto-migrated Priority-Medium Type-Defect

Comments

@GoogleCodeExporter
Copy link 

http://code.google.com/p/fuzzdb/source/browse/trunk/attack-payloads/sql-injectio
n/detect/GenericBlind.fuzz.txt?spec=svn138&r=138

The following payloads are totally useless, becase of return type for pg_sleep 
is void and this creates a Postgresql error.

1 or pg_sleep(__TIME__)--
" or pg_sleep(__TIME__)--
' or pg_sleep(__TIME__)--
1) or pg_sleep(__TIME__)--
") or pg_sleep(__TIME__)--
') or pg_sleep(__TIME__)--
1)) or pg_sleep(__TIME__)--
")) or pg_sleep(__TIME__)--
')) or pg_sleep(__TIME__)--

Original issue reported on code.google.com by mesuttimur@gmail.com on 22 Nov 2010 at 1:16
sempf added a commit to sempf/fuzzdb that referenced this issue Oct 3, 2017
@sempf
Removed PGSQL per Issue fuzzdb-project#2
67fd2f1 
I confirmed that the pg_sleep returned a null and caused a non-exploitable error, so I deleted the commands that referenced it.
@sempf
Copy link
Contributor

sempf commented Oct 3, 2017

I confirmed this issue and removed the referenced lines.

amuntner added a commit that referenced this issue Sep 28, 2019
@amuntner
Merge pull request #167 from sempf/master
aca3346 
Removed PGSQL per Issue #2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
auto-migrated Priority-Medium Type-Defect
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@sempf @amuntner @GoogleCodeExporter