Backup_Repos/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap synced 2025-12-07 17:02:39 +01:00
Code Issues Projects Releases Wiki Activity

major fix

Browse source
This commit is contained in:
Bernardo Damele 2012-07-06 22:55:34 +01:00
parent 8c871476ee
commit 3a11fc2d9e
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
lib/takeover/xp_cmdshell.py
View file

@ -172,8 +172,9 @@ class xp_cmdshell:
inject.goStacked("INSERT INTO %s EXEC %s '%s'" % (self.cmdTblName, self.xpCmdshellStr, cmd)) inject.goStacked("INSERT INTO %s EXEC %s '%s'" % (self.cmdTblName, self.xpCmdshellStr, cmd))
output = inject.getValue("SELECT %s FROM %s" % (self.tblField, self.cmdTblName), resumeValue=False) output = inject.getValue("SELECT %s FROM %s" % (self.tblField, self.cmdTblName), resumeValue=False)
inject.goStacked("DELETE FROM %s" % self.cmdTblName) inject.goStacked("DELETE FROM %s" % self.cmdTblName)
if output and isListLike(output): if output and isListLike(output):
output = output[1:] output = output[0]
return output return output