From b48a14a63ba5cf9957ed0ba9ddeb0dad96e70da4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Miroslav=20=C5=A0tampar?= Date: Thu, 12 Nov 2026 14:32:41 +0100 Subject: [PATCH] Fix for --sql-query splitting on ';' inside string literals --- lib/controller/action.py | 3 ++- lib/core/settings.py | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/controller/action.py b/lib/controller/action.py index 531dfa722..daea4e76c 100644 --- a/lib/controller/action.py +++ b/lib/controller/action.py @@ -9,6 +9,7 @@ from lib.controller.handler import setHandler from lib.core.common import Backend from lib.core.common import Format from lib.core.common import hashDBWrite +from lib.core.common import splitFields from lib.core.data import conf from lib.core.data import kb from lib.core.data import logger @@ -251,7 +252,7 @@ def action(): raise if conf.sqlQuery: - for query in conf.sqlQuery.strip(';').split(';'): + for query in splitFields(conf.sqlQuery.strip(';'), delimiter=';'): # Note: e.g. "SELECT 'a;b'" is a single statement query = query.strip() if query: conf.dumper.sqlQuery(query, conf.dbmsHandler.sqlQuery(query)) diff --git a/lib/core/settings.py b/lib/core/settings.py index 424e4348b..5ff454131 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from thirdparty import six # sqlmap version (...) -VERSION = "1.10.11.33" +VERSION = "1.10.11.34" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)