Backup_Repos/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap synced 2025-12-09 18:02:56 +01:00
Code Issues Projects Releases Wiki Activity

MySQL is specific (types are automatically being converted without any warning/error)

Browse source
This commit is contained in:
stamparm 2013-05-16 15:12:36 +02:00
parent f1f34a65a2
commit 7ea8dd9428
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/techniques/brute/use.py
View file

@ -225,7 +225,10 @@ def columnExists(columnFile, regex=None):
columns = {}
for column in threadData.shared.value:
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column)))
if Backend.getIdentifiedDbms() in (DBMS.MYSQL,):
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ABS(%s)>0)", (column, table, column)))
else:
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column)))
if result:
columns[column] = 'numeric'