diff --git a/plugins/dbms/mssqlserver/enumeration.py b/plugins/dbms/mssqlserver/enumeration.py index 5ba2921ff..922119d61 100644 --- a/plugins/dbms/mssqlserver/enumeration.py +++ b/plugins/dbms/mssqlserver/enumeration.py @@ -123,7 +123,7 @@ class Enumeration(GenericEnumeration): tables = [] for index in xrange(int(count)): - query = rootQuery.blind.query.replace("%s", db).replace("%d", str(index)) + query = rootQuery.blind.query.replace("%s", db) % index table = inject.getValue(query, inband=False, error=False) kb.hintValue = table table = safeSQLIdentificatorNaming(table, True)