From 6cc52cc12ab04f419b520dd452f7ce0a73ceda7f Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 12 Nov 2018 14:07:41 +0100 Subject: [PATCH] Fixes #3366 --- lib/core/settings.py | 2 +- lib/request/connect.py | 2 +- txt/checksum.md5 | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index fb7609b18..9084bfef2 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.2.11.6" +VERSION = "1.2.11.7" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/request/connect.py b/lib/request/connect.py index 53cf065bd..1a6c4e580 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -957,7 +957,7 @@ class Connect(object): retVal = paramString match = re.search(r"%s=[^&]*" % re.escape(parameter), paramString) if match: - retVal = re.sub(re.escape(match.group(0)), "%s=%s" % (parameter, newValue), paramString) + retVal = re.sub(re.escape(match.group(0)), ("%s=%s" % (parameter, newValue)).replace('\\', r'\\'), paramString) else: match = re.search(r"(%s[\"']:[\"'])([^\"']+)" % re.escape(parameter), paramString) if match: diff --git a/txt/checksum.md5 b/txt/checksum.md5 index 5d3bb0633..b0fee5497 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -49,7 +49,7 @@ c8c386d644d57c659d74542f5f57f632 lib/core/patch.py 0c3eef46bdbf87e29a3f95f90240d192 lib/core/replication.py a7db43859b61569b601b97f187dd31c5 lib/core/revision.py fcb74fcc9577523524659ec49e2e964b lib/core/session.py -7e344a320c695a16b3c52d53f7c06006 lib/core/settings.py +2ec7d2bc8a0e0c387488c41c0cd44f51 lib/core/settings.py a971ce157d04de96ba6e710d3d38a9a8 lib/core/shell.py a7edc9250d13af36ac0108f259859c19 lib/core/subprocessng.py 721198b5be72c8015a02acb116532a1f lib/core/target.py @@ -71,7 +71,7 @@ f6b5957bf2103c3999891e4f45180bce lib/parse/payloads.py 30eed3a92a04ed2c29770e1b10d39dc0 lib/request/basicauthhandler.py 2b81435f5a7519298c15c724e3194a0d lib/request/basic.py 859b6ad583e0ffba154f17ee179b5b89 lib/request/comparison.py -3c53af24cc2ffb1895f253fbefb66efd lib/request/connect.py +9bfc067165e82afc0b271f777850ad30 lib/request/connect.py dd4598675027fae99f2e2475b05986da lib/request/direct.py 2044fce3f4ffa268fcfaaf63241b1e64 lib/request/dns.py 98535d0efca5551e712fcc4b34a3f772 lib/request/httpshandler.py