PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 20:51:31 +00:00
Code Issues Projects Releases Wiki Activity

MySQL is specific (types are automatically being converted without any warning/error)

Browse Source
This commit is contained in:
stamparm
2013-05-16 15:12:36 +02:00
parent f1f34a65a2
commit 7ea8dd9428
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/techniques/brute/use.py
View File

@@ -225,7 +225,10 @@ def columnExists(columnFile, regex=None):
columns = {}
for column in threadData.shared.value:
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column)))
if Backend.getIdentifiedDbms() in (DBMS.MYSQL,):
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ABS(%s)>0)", (column, table, column)))
else:
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column)))
if result:
columns[column] = 'numeric'