diff --git a/lib/core/agent.py b/lib/core/agent.py index 8971ab0f4..423f66bd7 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -246,6 +246,9 @@ class Agent(object): else: query = kb.injection.prefix or prefix or "" + if "SELECT '[RANDSTR]'" in query: # escaping of pre-WHERE prefixes + query = query.replace("'[RANDSTR]'", unescaper.escape(randomStr(), quote=False)) + if not (expression and expression[0] == ';') and not (query and query[-1] in ('(', ')') and expression and expression[0] in ('(', ')')) and not (query and query[-1] == '('): query += " " diff --git a/lib/core/settings.py b/lib/core/settings.py index da3155437..025ee75c2 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.2.10.13" +VERSION = "1.2.10.14" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/txt/checksum.md5 b/txt/checksum.md5 index bd4e3b724..d777a525a 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -27,7 +27,7 @@ c1bccc94522d3425a372dcd57f78418e extra/wafdetectify/wafdetectify.py d6deacb76e1f479b3c690c215fad1c08 lib/controller/controller.py c7443613a0a2505b1faec931cee2a6ef lib/controller/handler.py 1e5532ede194ac9c083891c2f02bca93 lib/controller/__init__.py -effd6e6a07b13fd8b3803ed4b89b06e2 lib/core/agent.py +6f9bc9a98821572b68819b8f12de6b59 lib/core/agent.py c347f085bd561adfa26d3a9512e5f3b9 lib/core/bigarray.py 11448f59efbfdceff2437239e36d9dc5 lib/core/common.py 0d082da16c388b3445e656e0760fb582 lib/core/convert.py @@ -49,7 +49,7 @@ c8c386d644d57c659d74542f5f57f632 lib/core/patch.py 0c3eef46bdbf87e29a3f95f90240d192 lib/core/replication.py a7db43859b61569b601b97f187dd31c5 lib/core/revision.py fcb74fcc9577523524659ec49e2e964b lib/core/session.py -d3595e4cbdf8fa81c648a8caa339a444 lib/core/settings.py +2e35f0241f73d87a34eb070faa227244 lib/core/settings.py dd68a9d02fccb4fa1428b20e15b0db5d lib/core/shell.py a7edc9250d13af36ac0108f259859c19 lib/core/subprocessng.py 62bc180e3e828949ffb342a8f756c183 lib/core/target.py