From 42480ba90154f8145fd8903184938995a2210da2 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 17 Oct 2019 13:39:47 +0200 Subject: [PATCH] Update regarding #3928 --- data/txt/common-files.txt | 9 +++++++++ lib/core/settings.py | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/data/txt/common-files.txt b/data/txt/common-files.txt index 05e6ce265..ad32405e3 100644 --- a/data/txt/common-files.txt +++ b/data/txt/common-files.txt @@ -203,6 +203,15 @@ /var/www/nginx-default/index.php /srv/www/index.php +# Reference: https://github.com/sqlmapproject/sqlmap/issues/3928 + +/srv/www/htdocs/index.php +/usr/local/apache2/htdocs/index.php +/usr/local/www/data/index.php +/var/apache2/htdocs/index.php +/var/www/htdocs/index.php +/var/www/html/index.php + # Reference: https://www.gracefulsecurity.com/path-traversal-cheat-sheet-linux /etc/passwd diff --git a/lib/core/settings.py b/lib/core/settings.py index e70ce9a36..ea87b96c3 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -18,7 +18,7 @@ from lib.core.enums import OS from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.3.10.19" +VERSION = "1.3.10.20" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)