sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-01-24 16:24:25 +03:00
Code Issues Packages Projects Releases Wiki Activity

avoid unescaping user provided queries (--sql-query, --sql-shell, --sql-file). Before it was only applied to --sql-file

Browse Source
This commit is contained in:
Bernardo Damele 2012-07-12 00:17:07 +01:00
parent 66d854c7d8
commit caeddf6822
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
plugins/generic/enumeration.py
View File

@ -2393,8 +2393,8 @@ class Enumeration:
def sqlQuery(self, query): def sqlQuery(self, query):
output = None output = None
sqlType = None sqlType = None
query = query.rstrip(';') query = query.rstrip(';')
kb.unescape = False
for sqlTitle, sqlStatements in SQL_STATEMENTS.items(): for sqlTitle, sqlStatements in SQL_STATEMENTS.items():
for sqlStatement in sqlStatements: for sqlStatement in sqlStatements:
@ -2407,12 +2407,16 @@ class Enumeration:
logger.info(infoMsg) logger.info(infoMsg)
output = inject.getValue(query, fromUser=True) output = inject.getValue(query, fromUser=True)
kb.unescape = True
return output return output
elif not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct: elif not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
warnMsg = "execution of custom SQL queries is only " warnMsg = "execution of custom SQL queries is only "
warnMsg += "available when stacked queries are supported" warnMsg += "available when stacked queries are supported"
logger.warn(warnMsg) logger.warn(warnMsg)
kb.unescape = True
return None return None
else: else:
if sqlType: if sqlType:
@ -2428,6 +2432,8 @@ class Enumeration:
output = False output = False
kb.unescape = True
return output return output
def sqlShell(self): def sqlShell(self):
@ -2471,8 +2477,6 @@ class Enumeration:
dataToStdout("No output\n") dataToStdout("No output\n")
def sqlFile(self): def sqlFile(self):
kb.unescape = False
infoMsg = "executing SQL statements from given file(s)" infoMsg = "executing SQL statements from given file(s)"
logger.info(infoMsg) logger.info(infoMsg)
@ -2488,5 +2492,3 @@ class Enumeration:
logger.info(infoMsg) logger.info(infoMsg)
conf.dumper.query(query, self.sqlQuery(query)) conf.dumper.query(query, self.sqlQuery(query))
kb.unescape = True