major fix

This commit is contained in:
Bernardo Damele 2012-07-06 22:55:34 +01:00
parent 8c871476ee
commit 3a11fc2d9e

View File

@ -172,8 +172,9 @@ class xp_cmdshell:
inject.goStacked("INSERT INTO %s EXEC %s '%s'" % (self.cmdTblName, self.xpCmdshellStr, cmd))
output = inject.getValue("SELECT %s FROM %s" % (self.tblField, self.cmdTblName), resumeValue=False)
inject.goStacked("DELETE FROM %s" % self.cmdTblName)
if output and isListLike(output):
output = output[1:]
output = output[0]
return output