way better as there is no official release version for FOUND_ROWS() (it appears somewhere in alphas/betas of 4.0.x - i've stumbled upon one site with 4.0.22 and it didn't recognized FOUND_ROWS).

This commit is contained in:
Miroslav Stampar 2010-12-21 22:18:27 +00:00
parent 7a525f28d4
commit f905adb7c1

View File

@ -222,7 +222,7 @@ class Fingerprint(GenericFingerprint):
setDbms("%s 5" % DBMS.MYSQL)
self.getBanner()
elif inject.checkBooleanExpression("(SELECT FOUND_ROWS())>=0"):
elif inject.checkBooleanExpression("STRCMP(CHAR(97), CHAR(65))=0"):
kb.dbmsVersion = ["< 5.0.0"]
setDbms("%s 4" % DBMS.MYSQL)
self.getBanner()