sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 17:46:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix for --file-read on MSSQL for error technique (again that unpacking was causing problems); also reverting that check for file paths as one user mentioned that network paths are also possible for usage on Windows machines (e.g. \\bla\bla)

Browse Source
This commit is contained in:
Miroslav Stampar 2011-05-02 21:55:06 +00:00
parent 6cff3e97f4
commit eceb5eca7b
2 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/dbms/mssqlserver/filesystem.py
View File

@ -98,7 +98,7 @@ class Filesystem(GenericFilesystem):
if not result:
result = []
count = inject.getValue("SELECT COUNT(%s) FROM %s" % (self.tblField, hexTbl), resumeValue=False, charsetType=2)
count = inject.getValue("SELECT COUNT(*) FROM %s" % (hexTbl), resumeValue=False, charsetType=2)
if not isNumPosStrValue(count):
errMsg = "unable to retrieve the content of the "

6
plugins/generic/filesystem.py
View File

@ -266,12 +266,6 @@ class Filesystem:
self.checkDbmsOs()
if Backend.isOs(OS.WINDOWS) and not re.search(r'\A[A-Z]:', rFile, re.I) or\
Backend.isOs(OS.LINUX) and not rFile.startswith('/'):
errMsg = "invalid file path used for the underlying operating "
errMsg += "system '%s' of the back-end '%s' server ('%s')" % (Backend.getOs(), Backend.getDbms(), rFile)
raise sqlmapFilePathException, errMsg
if conf.direct or isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED):
if isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED):
debugMsg = "going to read the file with stacked query SQL "