sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-11-04 09:57:38 +03:00
Code Issues Packages Projects Releases Wiki Activity

MySQL is specific (types are automatically being converted without any warning/error)

Browse Source
This commit is contained in:
stamparm 2013-05-16 15:12:36 +02:00
parent f1f34a65a2
commit 7ea8dd9428
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/techniques/brute/use.py
View File

@ -225,7 +225,10 @@ def columnExists(columnFile, regex=None):
columns = {} columns = {}
for column in threadData.shared.value: for column in threadData.shared.value:
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column))) if Backend.getIdentifiedDbms() in (DBMS.MYSQL,):
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ABS(%s)>0)", (column, table, column)))
else:
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column)))
if result: if result:
columns[column] = 'numeric' columns[column] = 'numeric'