PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 13:11:29 +00:00
Code Issues Projects Releases Wiki Activity

Major bug fix to --union-test

Browse Source
This commit is contained in:
Bernardo Damele
2010-10-25 23:39:55 +00:00
parent 7effd0c301
commit f5904d0bc0
9 changed files with 29 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
lib/techniques/inband/union/test.py
View File

@@ -108,23 +108,23 @@ def __unionConfirm():
# Assure that the above function found the exploitable full inband
# SQL injection position
if not isinstance(kb.unionPosition, int):
value = __unionPosition(falseCond=True)
value = __unionPosition(negative=True)
# Assure that the above function found the exploitable partial
# (single entry) inband SQL injection position by appending
# a false condition after the parameter value
# (single entry) inband SQL injection position with negative
# parameter value
if not isinstance(kb.unionPosition, int):
value = __unionPosition(negative=True)
value = __unionPosition(falseCond=True)
# Assure that the above function found the exploitable partial
# (single entry) inband SQL injection position with negative
# parameter value
# (single entry) inband SQL injection position by appending
# a false condition after the parameter value
if not isinstance(kb.unionPosition, int):
return
else:
setUnion(negative=True)
setUnion(falseCond=True)
else:
setUnion(falseCond=True)
setUnion(negative=True)
return value