sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-28 20:43:49 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix for an Issue #691

Browse Source
This commit is contained in:
Miroslav Stampar 2014-05-15 19:39:18 +02:00
parent fc3c321b01
commit c51e219cc1
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
plugins/dbms/mssqlserver/fingerprint.py
View File

@ -137,16 +137,16 @@ class Fingerprint(GenericFingerprint):
versions = { "2003": ("5.2", (2, 1)), versions = { "2003": ("5.2", (2, 1)),
# TODO: verify this # TODO: verify this
#"2003": ("6.0", (2, 1)), #"2003": ("6.0", (2, 1)),
"2008": ("7.0", (1,)), "2008": ("7.0", (2, 1,)),
"2000": ("5.0", (4, 3, 2, 1)), "2000": ("5.0", (4, 3, 2, 1)),
"7": ("6.1", (1, 0)), "7": ("6.1", (1, 0)),
"XP": ("5.1", (2, 1)), "XP": ("5.1", (3, 2, 1)),
"NT": ("4.0", (6, 5, 4, 3, 2, 1)) } "NT": ("4.0", (6, 5, 4, 3, 2, 1)) }
# Get back-end DBMS underlying operating system version # Get back-end DBMS underlying operating system version
for version, data in versions.items(): for version, data in versions.items():
query = "(SELECT LEN(%s) FROM %s WHERE %s " % (self.tblField, self.fileTblName, self.tblField) query = "EXISTS(SELECT %s FROM %s WHERE %s " % (self.tblField, self.fileTblName, self.tblField)
query += "LIKE '%Windows NT " + data[0] + "%')>0" query += "LIKE '%Windows NT " + data[0] + "%')"
result = inject.checkBooleanExpression(query) result = inject.checkBooleanExpression(query)
if result: if result:
@ -169,13 +169,12 @@ class Fingerprint(GenericFingerprint):
# Get back-end DBMS underlying operating system service pack # Get back-end DBMS underlying operating system service pack
sps = versions[Backend.getOsVersion()][1] sps = versions[Backend.getOsVersion()][1]
for sp in sps: for sp in sps:
query = "SELECT LEN(%s) FROM %s WHERE %s " % (self.tblField, self.fileTblName, self.tblField) query = "EXISTS(SELECT %s FROM %s WHERE %s " % (self.tblField, self.fileTblName, self.tblField)
query += "LIKE '%Service Pack " + getUnicode(sp) + "%'" query += "LIKE '%Service Pack " + getUnicode(sp) + "%')"
result = inject.goStacked(query) result = inject.checkBooleanExpression(query)
if result is not None and len(result) > 0 and result[0].isdigit(): if result:
Backend.setOsServicePack(sp) Backend.setOsServicePack(sp)
break break