About this question
Is this database vulnerable to some sort of error based SQL injection?
After reading various research papers, I got to know that the SQLSTATE values are based on the SQLSTATE specifications contained in the standards: ISO/IEC 9075:1992, Database Language SQL and ANSI X3.135-1992 Database Language SQL. SQLSTATE values are returned to the application in the last five bytes of the SQLCA. Each five-character value is a return code that indicates the outcome of the most recently executed SQL statement.
SQLSTATE values are designed so that application programs can test for specific errors or classes of errors. The first character of an SQLSTATE value indicates whether the SQL statement was executed successfully or unsuccessfully (equal to or not equal to zero, respectively).