sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-27 09:20:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

Major bug fix to forge SQL injection payload on Oracle

Browse Source
This commit is contained in:
Bernardo Damele 2009-01-13 23:15:57 +00:00
parent bc448211c5
commit fd7cb9101c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/core/agent.py
View File

@ -334,7 +334,7 @@ class Agent:
elif fieldsNoSelect: elif fieldsNoSelect:
concatQuery = "'%s'||%s||'%s'" % (temp.start, concatQuery, temp.stop) concatQuery = "'%s'||%s||'%s'" % (temp.start, concatQuery, temp.stop)
if kb.dbms == "Oracle" and ( fieldsSelect or fieldsNoSelect ): if kb.dbms == "Oracle" and " FROM " not in concatQuery and ( fieldsSelect or fieldsNoSelect ):
concatQuery += " FROM DUAL" concatQuery += " FROM DUAL"
elif kb.dbms == "Microsoft SQL Server": elif kb.dbms == "Microsoft SQL Server":