From e7372a9512c57ce079dc7e0ca8492176727d3211 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 23 Jun 2022 13:47:52 +0200 Subject: [PATCH] Fixes #5123 --- lib/core/settings.py | 2 +- lib/core/target.py | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 2683ad2b1..7b117caee 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.6.6.7" +VERSION = "1.6.6.8" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/core/target.py b/lib/core/target.py index cda19d99b..c47b45130 100644 --- a/lib/core/target.py +++ b/lib/core/target.py @@ -305,6 +305,9 @@ def _setRequestParams(): testableParameters = True else: + if place == PLACE.URI: + value = conf.url = conf.url.replace('+', "%20") # NOTE: https://github.com/sqlmapproject/sqlmap/issues/5123 + conf.parameters[place] = value conf.paramDict[place] = OrderedDict()