sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 02:53:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix for a bug reported by viniciusmaxdaloop@gmail.com and few related patches

Browse Source
This commit is contained in:
Miroslav Stampar 2011-05-26 08:17:21 +00:00
parent f3ed61af5f
commit a397baa89a
3 changed files with 17 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
plugins/dbms/mssqlserver/enumeration.py
View File

@ -11,6 +11,7 @@ from lib.core.agent import agent
from lib.core.common import arrayizeValue
from lib.core.common import Backend
from lib.core.common import getRange
from lib.core.common import isNoneValue
from lib.core.common import isNumPosStrValue
from lib.core.common import isTechniqueAvailable
from lib.core.common import safeSQLIdentificatorNaming
@ -93,7 +94,7 @@ class Enumeration(GenericEnumeration):
query = rootQuery.inband.query % db
value = inject.getValue(query, blind=False)
if value:
if not isNoneValue(value):
kb.data.cachedTables[db] = arrayizeValue(value)
if not kb.data.cachedTables and not conf.direct:
@ -186,7 +187,7 @@ class Enumeration(GenericEnumeration):
query += tblQuery
values = inject.getValue(query, blind=False)
if values:
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]
@ -279,7 +280,7 @@ class Enumeration(GenericEnumeration):
query += " AND %s" % colQuery.replace("[DB]", db)
values = inject.getValue(query, blind=False)
if values:
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]

5
plugins/dbms/oracle/enumeration.py
View File

@ -10,6 +10,7 @@ See the file 'doc/COPYING' for copying permission
from lib.core.agent import agent
from lib.core.common import Backend
from lib.core.common import getRange
from lib.core.common import isNoneValue
from lib.core.common import isNumPosStrValue
from lib.core.common import isTechniqueAvailable
from lib.core.common import safeSQLIdentificatorNaming
@ -64,7 +65,7 @@ class Enumeration(GenericEnumeration):
return self.getRoles(query2=True)
if values:
if not isNoneValue(values):
for value in values:
user = None
roles = set()
@ -204,7 +205,7 @@ class Enumeration(GenericEnumeration):
query += colQuery
values = inject.getValue(query, blind=False)
if values:
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]

20
plugins/generic/enumeration.py
View File

@ -175,7 +175,7 @@ class Enumeration:
query = rootQuery.inband.query
value = inject.getValue(query, blind=False)
if value:
if not isNoneValue(value):
kb.data.cachedUsers = arrayizeValue(value)
if not kb.data.cachedUsers and not conf.direct:
@ -272,7 +272,7 @@ class Enumeration:
else:
value = inject.getValue(query, blind=False)
if value:
if not isNoneValue(value):
for user, password in value:
if not user or user == " ":
continue
@ -467,7 +467,7 @@ class Enumeration:
return self.getPrivileges(query2=True)
if values:
if not isNoneValue(values):
for value in values:
user = None
privileges = set()
@ -683,7 +683,7 @@ class Enumeration:
query = rootQuery.inband.query
value = inject.getValue(query, blind=False)
if value:
if not isNoneValue(value):
kb.data.cachedDbs = arrayizeValue(value)
if not kb.data.cachedDbs and not conf.direct:
@ -826,7 +826,7 @@ class Enumeration:
value = inject.getValue(query, blind=False)
value = filter(lambda x: x, value)
if value:
if not isNoneValue(value):
if Backend.isDbms(DBMS.SQLITE):
if isinstance(value, basestring):
value = [[ DBMS.SQLITE, value ]]
@ -1073,12 +1073,12 @@ class Enumeration:
if Backend.isDbms(DBMS.SQLITE):
parseSqliteTableSchema(value)
elif value:
elif not isNoneValue(value):
table = {}
columns = {}
for columnData in value:
if columnData[0] is not None:
if not isNoneValue(columnData):
name = safeSQLIdentificatorNaming(columnData[0])
if len(columnData) == 1:
@ -1836,7 +1836,7 @@ class Enumeration:
query += exclDbsQuery
values = inject.getValue(query, blind=False)
if values:
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]
@ -1946,7 +1946,7 @@ class Enumeration:
query += exclDbsQuery
values = inject.getValue(query, blind=False)
if values:
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]
@ -2109,7 +2109,7 @@ class Enumeration:
query += exclDbsQuery
values = inject.getValue(query, blind=False)
if values:
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]