PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 20:51:31 +00:00
Code Issues Projects Releases Wiki Activity

important fix (LIMIT m,n should not be considered deterministic in column by column table dumping)

Browse Source
This commit is contained in:
Miroslav Stampar
2011-10-12 12:31:47 +00:00
parent e3a719e7d2
commit 39e33bea99
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/generic/enumeration.py
View File

@@ -1619,6 +1619,8 @@ class Enumeration:
query = rootQuery.inband.query % (colString, conf.db, tbl) query = rootQuery.inband.query % (colString, conf.db, tbl)
if not entries and query: if not entries and query:
if Backend.getIdentifiedDbms() in (DBMS.MYSQL,):
query = "%s ORDER BY %s" % (query, sorted(colList, key=len)[0])
entries = inject.getValue(query, blind=False, dump=True) entries = inject.getValue(query, blind=False, dump=True)
if isNoneValue(entries): if isNoneValue(entries):