CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixing multi-column blind --search

Browse source
This commit is contained in:
Miroslav Štampar 2026-07-28 16:57:55 +02:00
parent 356984929f
commit ffffe2d0b2
3 changed files with 36 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
plugins/generic/search.py
View file

@ -535,7 +535,10 @@ class Search(object):
origDb = conf.db
origTbl = conf.tbl
for column, dbData in foundCols.items():
# Note: only the current column - foundCols also holds columns from earlier
# colList iterations, and re-walking them here re-issued their table lookups
# (O(n^2) blind requests) and duplicated their found tables
for column, dbData in ((column, foundCols[column]),):
colQuery = "%s%s" % (colCond, colCondParam)
colQuery = colQuery % unsafeSQLIdentificatorNaming(column)