diff --git a/CHANGELOG b/CHANGELOG index 3e6590df7..a7bd31414 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,8 @@ #Nmap Changelog ($Id$); -*-text-*- +o [NSE][GH#1191] Add two common error strings that improve MySQL detection + by the script http-sql-injection. [Robert Taylor, Paulino Calderon] + o [NSE][GH#1220] Fix bug in http-vuln-cve2006-3392 that prevented the script to generate the vulnerability report correctly. [rewardone] diff --git a/nselib/data/http-sql-errors.lst b/nselib/data/http-sql-errors.lst index ca0d8b9bc..e1e555dc1 100644 --- a/nselib/data/http-sql-errors.lst +++ b/nselib/data/http-sql-errors.lst @@ -108,3 +108,5 @@ server object error supplied argument is not a valid MySQL result resource session_start%(%) unexpected end of SQL command +You have an error in your SQL syntax +check the manual that corresponds to your MySQL server version for the right syntax