From 95625027448910623752443e198fda795ab66f21 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Sat, 9 Feb 2019 15:49:52 +0100 Subject: [PATCH] Potential patch for #3470 --- lib/core/settings.py | 2 +- lib/takeover/web.py | 2 +- txt/checksum.md5 | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 64041a65e..a0110e46d 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.3.2.12" +VERSION = "1.3.2.13" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/takeover/web.py b/lib/takeover/web.py index 445270f28..24d2f0d38 100644 --- a/lib/takeover/web.py +++ b/lib/takeover/web.py @@ -77,7 +77,7 @@ class Web: if not cmd: cmd = conf.osCmd - cmdUrl = "%s?cmd=%s" % (self.webBackdoorUrl, cmd) + cmdUrl = "%s?cmd=%s" % (self.webBackdoorUrl, getUnicode(cmd)) page, _, _ = Request.getPage(url=cmdUrl, direct=True, silent=True, timeout=BACKDOOR_RUN_CMD_TIMEOUT) if page is not None: diff --git a/txt/checksum.md5 b/txt/checksum.md5 index cb854dc67..7c7839d5b 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -50,7 +50,7 @@ d5ef43fe3cdd6c2602d7db45651f9ceb lib/core/readlineng.py 7d8a22c582ad201f65b73225e4456170 lib/core/replication.py 3179d34f371e0295dd4604568fb30bcd lib/core/revision.py d6269c55789f78cf707e09a0f5b45443 lib/core/session.py -17a9ca024712c5621e8c1d79ce798ad3 lib/core/settings.py +61c1b630a7454947a1eda659e31bf251 lib/core/settings.py 4483b4a5b601d8f1c4281071dff21ecc lib/core/shell.py 10fd19b0716ed261e6d04f311f6f527c lib/core/subprocessng.py 43772ea73e9e3d446f782af591cb4eda lib/core/target.py @@ -89,7 +89,7 @@ fb6be55d21a70765e35549af2484f762 lib/takeover/__init__.py d55029a4c048e345fbb07a8f91604d83 lib/takeover/metasploit.py 6b5b841d445b7b973c2e033edfb01b16 lib/takeover/registry.py ad038ac567f97a4b940b7987792d64a4 lib/takeover/udf.py -915a3fbd557fb136bd0e16c46d993be3 lib/takeover/web.py +f0a809475eb0db95ffbe89fd6ca5bd96 lib/takeover/web.py 1aadcdc058bb813d09ad23d26ea2a6b5 lib/takeover/xp_cmdshell.py 654d222cbae610923965c583355ec34a lib/techniques/blind/inference.py fb6be55d21a70765e35549af2484f762 lib/techniques/blind/__init__.py