Minor adjustments

This commit is contained in:
Bernardo Damele 2008-12-30 21:24:01 +00:00
parent a4d62af2ea
commit c1010c20d8
3 changed files with 5 additions and 1 deletions

View File

@ -16,12 +16,14 @@ sqlmap (0.6.4-1) stable; urgency=low
* Added internal support to forge CASE statements, used only by --is-dba
query at the moment;
* Minor layout adjustment to the --update output;
* Increased default timeout to 30 seconds;
* Major bug fix to avoid tracebacks when multiple targets are specified
and one of them is not reachable;
* Minor bug fix to make the Partial UNION query SQL injection technique
work properly also on Oracle and Microsoft SQL Server;
* Minor bug fix to make the --postfix work even if --prefix is not
provided;
* Updated documentation.
-- Bernardo Damele A. G. <bernardo.damele@gmail.com> Day, DD MMM 2009 10:00:00 +0000

View File

@ -129,6 +129,8 @@ def setDbms(dbms):
kb.dbms = dbms
logger.info("the back-end DBMS is %s" % kb.dbms)
def setUnion(comment=None, count=None, position=None):
"""

View File

@ -257,7 +257,7 @@ class MySQLMap(Fingerprint, Enumeration, Filesystem, Takeover):
logMsg = "confirming MySQL"
logger.info(logMsg)
payload = agent.fullPayload(" AND CONCAT('%s', '%s')='%s%s'" % (randInt, randInt, randInt, randInt))
payload = agent.fullPayload(" AND ISNULL(1/0)")
result = Request.queryPage(payload)
if result != True: