mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-11-04 01:47:37 +03:00 
			
		
		
		
	Patch for an Issue #1860
This commit is contained in:
		
							parent
							
								
									3b74e99576
								
							
						
					
					
						commit
						1e07269fe3
					
				| 
						 | 
					@ -521,11 +521,14 @@ def start():
 | 
				
			||||||
 | 
					
 | 
				
			||||||
                                injection = checkSqlInjection(place, parameter, value)
 | 
					                                injection = checkSqlInjection(place, parameter, value)
 | 
				
			||||||
                                proceed = not kb.endDetection
 | 
					                                proceed = not kb.endDetection
 | 
				
			||||||
 | 
					                                injectable = False
 | 
				
			||||||
 | 
					
 | 
				
			||||||
                                if getattr(injection, "place", None) is not None:
 | 
					                                if getattr(injection, "place", None) is not None:
 | 
				
			||||||
                                    if NOTE.FALSE_POSITIVE_OR_UNEXPLOITABLE in injection.notes:
 | 
					                                    if NOTE.FALSE_POSITIVE_OR_UNEXPLOITABLE in injection.notes:
 | 
				
			||||||
                                        kb.falsePositives.append(injection)
 | 
					                                        kb.falsePositives.append(injection)
 | 
				
			||||||
                                    else:
 | 
					                                    else:
 | 
				
			||||||
 | 
					                                        injectable = True
 | 
				
			||||||
 | 
					
 | 
				
			||||||
                                        kb.injections.append(injection)
 | 
					                                        kb.injections.append(injection)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
                                        # In case when user wants to end detection phase (Ctrl+C)
 | 
					                                        # In case when user wants to end detection phase (Ctrl+C)
 | 
				
			||||||
| 
						 | 
					@ -540,7 +543,8 @@ def start():
 | 
				
			||||||
                                            proceed = False
 | 
					                                            proceed = False
 | 
				
			||||||
                                            paramKey = (conf.hostname, conf.path, None, None)
 | 
					                                            paramKey = (conf.hostname, conf.path, None, None)
 | 
				
			||||||
                                            kb.testedParams.add(paramKey)
 | 
					                                            kb.testedParams.add(paramKey)
 | 
				
			||||||
                                else:
 | 
					
 | 
				
			||||||
 | 
					                                if not injectable:
 | 
				
			||||||
                                    warnMsg = "%s parameter '%s' is not " % (paramType, parameter)
 | 
					                                    warnMsg = "%s parameter '%s' is not " % (paramType, parameter)
 | 
				
			||||||
                                    warnMsg += "injectable"
 | 
					                                    warnMsg += "injectable"
 | 
				
			||||||
                                    logger.warn(warnMsg)
 | 
					                                    logger.warn(warnMsg)
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -19,7 +19,7 @@ from lib.core.enums import OS
 | 
				
			||||||
from lib.core.revision import getRevisionNumber
 | 
					from lib.core.revision import getRevisionNumber
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
 | 
					# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
 | 
				
			||||||
VERSION = "1.0.5.20"
 | 
					VERSION = "1.0.5.21"
 | 
				
			||||||
REVISION = getRevisionNumber()
 | 
					REVISION = getRevisionNumber()
 | 
				
			||||||
STABLE = VERSION.count('.') <= 2
 | 
					STABLE = VERSION.count('.') <= 2
 | 
				
			||||||
VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev")
 | 
					VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev")
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue
	
	Block a user