From c395958dffb5db50ebbccd97f404786bb6a4d451 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Tue, 24 May 2016 14:55:19 +0200 Subject: [PATCH] Fixes #1888 --- lib/controller/checks.py | 3 ++- lib/core/datatype.py | 2 +- lib/core/settings.py | 4 ++-- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 5d2facc32..a9a41dfe4 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -710,7 +710,8 @@ def checkSqlInjection(place, parameter, value): if not checkFalsePositives(injection): kb.vulnHosts.remove(conf.hostname) - injection.notes.add(NOTE.FALSE_POSITIVE_OR_UNEXPLOITABLE) + if NOTE.FALSE_POSITIVE_OR_UNEXPLOITABLE not in injection.notes: + injection.notes.append(NOTE.FALSE_POSITIVE_OR_UNEXPLOITABLE) else: injection = None diff --git a/lib/core/datatype.py b/lib/core/datatype.py index ba33cc2b5..cd3e0bb77 100644 --- a/lib/core/datatype.py +++ b/lib/core/datatype.py @@ -91,7 +91,7 @@ class InjectionDict(AttribDict): self.prefix = None self.suffix = None self.clause = None - self.notes = set() + self.notes = [] # Note: https://github.com/sqlmapproject/sqlmap/issues/1888 # data is a dict with various stype, each which is a dict with # all the information specific for that stype diff --git a/lib/core/settings.py b/lib/core/settings.py index 4afadc5b3..e3330ee41 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from lib.core.revision import getRevisionNumber # sqlmap version (...) -VERSION = "1.0.5.53" +VERSION = "1.0.5.54" REVISION = getRevisionNumber() STABLE = VERSION.count('.') <= 2 VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev") @@ -533,7 +533,7 @@ HASHDB_FLUSH_RETRIES = 3 HASHDB_END_TRANSACTION_RETRIES = 3 # Unique milestone value used for forced deprecation of old HashDB values (e.g. when changing hash/pickle mechanism) -HASHDB_MILESTONE_VALUE = "zYwqRDymvj" # "".join(random.sample(string.ascii_letters, 10)) +HASHDB_MILESTONE_VALUE = "ERqvmQHalF" # "".join(random.sample(string.ascii_letters, 10)) # Warn user of possible delay due to large page dump in full UNION query injections LARGE_OUTPUT_THRESHOLD = 1024 ** 2