PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-17 13:19:01 +00:00
Code Issues Projects Releases Wiki Activity

Major bug fixes

Browse Source
This commit is contained in:
Bernardo Damele
2009-01-22 22:28:27 +00:00
parent d54a51a328
commit 793c323b2a
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/request/inject.py
View File

@@ -85,9 +85,9 @@ def __goInferenceFields(expression, expressionFields, expressionFieldsList, payl
expression = agent.limitQuery(num, expression, field) expression = agent.limitQuery(num, expression, field)
if "ROWNUM" in expressionFieldsList: if "ROWNUM" in expressionFieldsList:
expressionReplaced = expression.replace(expressionFields, field, 1)
else:
expressionReplaced = expression expressionReplaced = expression
else:
expressionReplaced = expression.replace(expressionFields, field, 1)
output = resume(expressionReplaced, payload) output = resume(expressionReplaced, payload)

2
xml/queries.xml
View File

@@ -131,7 +131,7 @@
<banner query="VERSION()"/> <banner query="VERSION()"/>
<current_user query="CURRENT_USER"/> <current_user query="CURRENT_USER"/>
<current_db query="CURRENT_DATABASE()"/> <current_db query="CURRENT_DATABASE()"/>
<is_dba query="(SELECT usesuper=true FROM pg_user WHERE usename=CURRENT_USER OFFSET 0 LIMIT 1)='true'"/> <is_dba query="(SELECT usesuper=true FROM pg_user WHERE usename=CURRENT_USER OFFSET 0 LIMIT 1)"/>
<users> <users>
<inband query="SELECT usename FROM pg_user"/> <inband query="SELECT usename FROM pg_user"/>
<blind query="SELECT DISTINCT(usename) FROM pg_user OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(usename)) FROM pg_user"/> <blind query="SELECT DISTINCT(usename) FROM pg_user OFFSET %d LIMIT 1" count="SELECT COUNT(DISTINCT(usename)) FROM pg_user"/>