sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-01-24 00:04:23 +03:00
Code Issues Packages Projects Releases Wiki Activity

expandAsteriskForColumns changes value of conf.db and conf.tbl potentially causing problems in further work

Browse Source
This commit is contained in:
Miroslav Stampar 2014-08-26 22:57:08 +02:00
parent decd092b2a
commit e68326c0fe
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/request/inject.py
View File

@ -343,6 +343,9 @@ def getValue(expression, blind=True, union=True, error=True, time=True, fromUser
getCurrentThreadData().disableStdOut = suppressOutput getCurrentThreadData().disableStdOut = suppressOutput
try: try:
pushValue(conf.db)
pushValue(conf.tbl)
if expected == EXPECTED.BOOL: if expected == EXPECTED.BOOL:
forgeCaseExpression = booleanExpression = expression forgeCaseExpression = booleanExpression = expression
@ -434,6 +437,9 @@ def getValue(expression, blind=True, union=True, error=True, time=True, fromUser
if suppressOutput is not None: if suppressOutput is not None:
getCurrentThreadData().disableStdOut = popValue() getCurrentThreadData().disableStdOut = popValue()
conf.tbl = popValue()
conf.db = popValue()
kb.safeCharEncode = False kb.safeCharEncode = False
if not kb.testMode and value is None and Backend.getDbms() and conf.dbmsHandler and not conf.noCast and not conf.hexConvert: if not kb.testMode and value is None and Backend.getDbms() and conf.dbmsHandler and not conf.noCast and not conf.hexConvert: