A type of SQL Injection where the attacker injects queries that force the database to evaluate a logical condition as either TRUE or FALSE. Hereafter the attacker can infer information by observing changes in the behaviour of the application, e.g. page content, response length, or HTTP status code.