sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-02 20:54:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fixes #2026

Browse Source
This commit is contained in:
Miroslav Stampar 2016-07-16 15:51:09 +02:00
parent c10b2825d7
commit 1e6191e3b1
2 changed files with 25 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/core/settings.py
View File

@ -19,7 +19,7 @@ from lib.core.enums import OS
from lib.core.revision import getRevisionNumber from lib.core.revision import getRevisionNumber
# sqlmap version (<major>.<minor>.<month>.<monthly commit>) # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
VERSION = "1.0.7.25" VERSION = "1.0.7.26"
REVISION = getRevisionNumber() REVISION = getRevisionNumber()
STABLE = VERSION.count('.') <= 2 STABLE = VERSION.count('.') <= 2
VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev") VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev")

8
lib/techniques/union/use.py
View File

@ -102,10 +102,11 @@ def _oneShotUnionUse(expression, unpack=True, limited=False):
retVal = _("(?P<result>%s.*%s)" % (kb.chars.start, kb.chars.stop)) retVal = _("(?P<result>%s.*%s)" % (kb.chars.start, kb.chars.stop))
else: else:
output = extractRegexResult(r"(?P<result>(<row[^>]+>)+)", page) output = extractRegexResult(r"(?P<result>(<row.+?/>)+)", page)
if output: if output:
retVal = "" try:
root = xml.etree.ElementTree.fromstring("<root>%s</root>" % output) root = xml.etree.ElementTree.fromstring("<root>%s</root>" % output)
retVal = ""
for column in kb.dumpColumns: for column in kb.dumpColumns:
base64 = True base64 = True
for child in root: for child in root:
@ -125,6 +126,9 @@ def _oneShotUnionUse(expression, unpack=True, limited=False):
row.append(child.attrib.get(column, NULL)) row.append(child.attrib.get(column, NULL))
retVal += "%s%s%s" % (kb.chars.start, kb.chars.delimiter.join(row), kb.chars.stop) retVal += "%s%s%s" % (kb.chars.start, kb.chars.delimiter.join(row), kb.chars.stop)
except xml.etree.ElementTree.ParseError:
pass
if retVal is not None: if retVal is not None:
retVal = getUnicode(retVal, kb.pageEncoding) retVal = getUnicode(retVal, kb.pageEncoding)