Initial support for partial UNION query sql injection

This commit is contained in:
Bernardo Damele
2008-12-02 21:56:23 +00:00
parent f97585c593
commit 578bcb9140
5 changed files with 41 additions and 15 deletions

View File

@@ -95,7 +95,7 @@ def unionTest():
query = agent.prefixQuery(" UNION ALL SELECT NULL")
for comment in ("", queries[kb.dbms].comment):
for comment in (queries[kb.dbms].comment, ""):
value = __effectiveUnionTest(query, comment)
if value: