From 711d2107e63e19cfeb012e889f01ef5c5b2973ef Mon Sep 17 00:00:00 2001 From: paulino Date: Mon, 28 May 2018 03:35:49 +0000 Subject: [PATCH] Adds two common error strings when detecting MySQL injections. Closes #1191 --- CHANGELOG | 3 +++ nselib/data/http-sql-errors.lst | 2 ++ 2 files changed, 5 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 3e6590df7..a7bd31414 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,8 @@ #Nmap Changelog ($Id$); -*-text-*- +o [NSE][GH#1191] Add two common error strings that improve MySQL detection + by the script http-sql-injection. [Robert Taylor, Paulino Calderon] + o [NSE][GH#1220] Fix bug in http-vuln-cve2006-3392 that prevented the script to generate the vulnerability report correctly. [rewardone] diff --git a/nselib/data/http-sql-errors.lst b/nselib/data/http-sql-errors.lst index ca0d8b9bc..e1e555dc1 100644 --- a/nselib/data/http-sql-errors.lst +++ b/nselib/data/http-sql-errors.lst @@ -108,3 +108,5 @@ server object error supplied argument is not a valid MySQL result resource session_start%(%) unexpected end of SQL command +You have an error in your SQL syntax +check the manual that corresponds to your MySQL server version for the right syntax