Backup_Repos/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap synced 2025-12-26 18:22:30 +01:00
Code Issues Projects Releases Wiki Activity

Proper fix to avoid UNION test false positives

Browse source
This commit is contained in:
Bernardo Damele 2011-01-11 23:59:02 +00:00
parent c2e994e806
commit 873951ab92
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/techniques/inband/union/test.py
View file

@ -49,7 +49,7 @@ def __unionPosition(comment, place, parameter, value, prefix, suffix, dbms, coun
# Perform the request
resultPage, _ = Request.queryPage(payload, place=place, content=True)
if resultPage and randQuery in resultPage and query not in resultPage:
if resultPage and randQuery in resultPage and " UNION ALL SELECT " not in resultPage:
setUnion(position=exprPosition)
validPayload = payload
unionVector = agent.forgeInbandQuery("[PAYLOAD]", exprPosition, count=count, comment=comment, prefix=prefix, suffix=suffix)