From efe0c1d49d0675c6e024ae2a7dd66f3e0b08bf26 Mon Sep 17 00:00:00 2001 From: meme-lord Date: Mon, 16 Aug 2021 21:58:09 +0100 Subject: [PATCH] Minor correction: MySQL does support stacked queries! --- pentesting-web/sql-injection/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pentesting-web/sql-injection/README.md b/pentesting-web/sql-injection/README.md index d5ef8608..9d034039 100644 --- a/pentesting-web/sql-injection/README.md +++ b/pentesting-web/sql-injection/README.md @@ -237,7 +237,7 @@ In this case there **isn't** any way to **distinguish** the **response** of the You can use stacked queries to **execute multiple queries in succession**. Note that while the subsequent queries are executed, the **results** are **not returned to the application**. Hence this technique is primarily of use in relation to **blind vulnerabilities** where you can use a second query to trigger a DNS lookup, conditional error, or time delay. -**Oracle** and **MySQL don't support** stacked queries. **Microsoft** and **PostgreSQL support** them: `QUERY-1-HERE; QUERY-2-HERE` +**Oracle** doesn't support** stacked queries. **MySQL**, **Microsoft** and **PostgreSQL support** them: `QUERY-1-HERE; QUERY-2-HERE` ## Out of band Exploitation