Other nomination
Blind SQL Injection: Inference thourgh Underflow exception
A blind SQL injection with no true/false oracle is turned into one by arithmetic: dividing by INSTR(SUBSTR(...)) raises a divide-by-zero exception whenever a guessed character is wrong, and the application's error handler returns a distinguishable second message. Character-by-character inference then reads the Oracle version out of v$instance.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.