From 10ffcb8b009f7bb08c519f2440d4e59e6f594cfb Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 20 Oct 2016 00:19:16 +0200 Subject: [PATCH] Fixes #2237 --- lib/core/settings.py | 2 +- lib/request/connect.py | 4 ++-- txt/checksum.md5 | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index e87bfa61a..cb1040c57 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.0.10.48" +VERSION = "1.0.10.49" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/request/connect.py b/lib/request/connect.py index 1d7d9ea42..3009eadf0 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -895,11 +895,11 @@ class Connect(object): retVal = paramString match = re.search("%s=[^&]*" % re.escape(parameter), paramString) if match: - retVal = re.sub(match.group(0), "%s=%s" % (parameter, newValue), paramString) + retVal = re.sub(re.escape(match.group(0)), "%s=%s" % (parameter, newValue), paramString) else: match = re.search("(%s[\"']:[\"'])([^\"']+)" % re.escape(parameter), paramString) if match: - retVal = re.sub(match.group(0), "%s%s" % (match.group(1), newValue), paramString) + retVal = re.sub(re.escape(match.group(0)), "%s%s" % (match.group(1), newValue), paramString) return retVal page, headers, code = Connect.getPage(url=conf.csrfUrl or conf.url, data=conf.data if conf.csrfUrl == conf.url else None, method=conf.method if conf.csrfUrl == conf.url else None, cookie=conf.parameters.get(PLACE.COOKIE), direct=True, silent=True, ua=conf.parameters.get(PLACE.USER_AGENT), referer=conf.parameters.get(PLACE.REFERER), host=conf.parameters.get(PLACE.HOST)) diff --git a/txt/checksum.md5 b/txt/checksum.md5 index 0f0ba5126..c79c057c3 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -45,7 +45,7 @@ e60456db5380840a586654344003d4e6 lib/core/readlineng.py 5ef56abb8671c2ca6ceecb208258e360 lib/core/replication.py 99a2b496b9d5b546b335653ca801153f lib/core/revision.py 7c15dd2777af4dac2c89cab6df17462e lib/core/session.py -8a2406d1ce7e5687f26ac7ba607af2cc lib/core/settings.py +1520d19267f5a3f3c176528568bc707a lib/core/settings.py 7af83e4f18cab6dff5e67840eb65be80 lib/core/shell.py 23657cd7d924e3c6d225719865855827 lib/core/subprocessng.py c3ace7874a536d801f308cf1fd03df99 lib/core/target.py @@ -67,7 +67,7 @@ b40a4c5d91770d347df36d3065b63798 lib/parse/sitemap.py 9299f21804033f099681525bb9bf51c0 lib/request/basicauthhandler.py 083e7f446909b12009e72ae8e5e5737c lib/request/basic.py c48285682a61d49982cb508351013cb4 lib/request/comparison.py -fa20d4d117875f9769ef49256d4da61f lib/request/connect.py +785742e6f903f39af4865f835e29e21f lib/request/connect.py d4d52c1073c75a6eecd2ebb98b670b96 lib/request/direct.py 1a46f7bb26b23ec0c0d9d9c95828241b lib/request/dns.py 70ceefe39980611494d4f99afb96f652 lib/request/httpshandler.py