CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-11-13 11:25:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fix for --sql-query splitting on ';' inside string literals

Browse source
This commit is contained in:
Miroslav Štampar 2026-11-12 14:32:41 +01:00
parent 04db324b01
commit b48a14a63b
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/controller/action.py
View file

@ -9,6 +9,7 @@ from lib.controller.handler import setHandler
from lib.core.common import Backend
from lib.core.common import Format
from lib.core.common import hashDBWrite
from lib.core.common import splitFields
from lib.core.data import conf
from lib.core.data import kb
from lib.core.data import logger
@ -251,7 +252,7 @@ def action():
raise
if conf.sqlQuery:
for query in conf.sqlQuery.strip(';').split(';'):
for query in splitFields(conf.sqlQuery.strip(';'), delimiter=';'): # Note: e.g. "SELECT 'a;b'" is a single statement
query = query.strip()
if query:
conf.dumper.sqlQuery(query, conf.dbmsHandler.sqlQuery(query))

2
lib/core/settings.py
View file

@ -19,7 +19,7 @@ from lib.core.enums import OS
from thirdparty import six
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
VERSION = "1.10.11.33"
VERSION = "1.10.11.34"
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)