In some languages, using arithmetic operators on elements that aren’t numeric, give some weird results. In JavaScript for example,
[ ] + { } is an Object, while { } + [ ] appears to be NaN.If these kind of obscure actions occur in a parser that is counted on to be very reliable, things can go bad real quickly. Let’s look at how MySQL behaves…
read more.........http://vagosec.org/2013/04/mysql-implicit-type-conversion/