Minor bug fix to make the Partial UNION query SQL injection technique

work properly also on Oracle and Microsoft SQL Server.
2025-12-06 12:41:30 +00:00 · 2008-12-22 22:48:44 +00:00
parent 1f7810e46a
commit 64bb57d786
5 changed files with 24 additions and 19 deletions
--- a/lib/core/settings.py
+++ b/lib/core/settings.py
@@ -74,6 +74,7 @@ SQL_STATEMENTS    = {
                      "SQL SELECT statement":  (
                             "select ",
                             " from ",
+                             " from dual",
                             " where ",
                             " group by ",
                             " order by ",