Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit c3e81a6

Browse files
stamparmstamparm
committed
Switching EXTRACTVALUE and FLOOR in priority (FLOOR is not working on recent MySQL)
1 parent 78ba337 commit c3e81a6

2 files changed

Lines changed: 13 additions & 13 deletions

File tree

‎data/xml/payloads/error_based.xml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -175,7 +175,7 @@
175175
<test>
176176
<title>MySQL &gt;= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)</title>
177177
<stype>2</stype>
178-
<level>1</level>
178+
<level>2</level>
179179
<risk>1</risk>
180180
<clause>1,2,3,8,9</clause>
181181
<where>1</where>
@@ -199,7 +199,7 @@
199199
<test>
200200
<title>MySQL &gt;= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)</title>
201201
<stype>2</stype>
202-
<level>1</level>
202+
<level>2</level>
203203
<risk>3</risk>
204204
<clause>1,2,3,8,9</clause>
205205
<!-- Despite this is an OR payload, keep where to 1 because otherwise it will not work when injecting in ORDER BY or GROUP BY -->
@@ -224,7 +224,7 @@
224224
<test>
225225
<title>MySQL &gt;= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)</title>
226226
<stype>2</stype>
227-
<level>2</level>
227+
<level>1</level>
228228
<risk>1</risk>
229229
<clause>1,2,3,8,9</clause>
230230
<where>1</where>
@@ -248,7 +248,7 @@
248248
<test>
249249
<title>MySQL &gt;= 5.1 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)</title>
250250
<stype>2</stype>
251-
<level>2</level>
251+
<level>1</level>
252252
<risk>3</risk>
253253
<clause>1,2,3,8,9</clause>
254254
<!-- Despite this is an OR payload, keep where to 1 because otherwise it will not work when injecting in ORDER BY or GROUP BY -->
@@ -322,7 +322,7 @@
322322
<test>
323323
<title>MySQL &gt;= 4.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)</title>
324324
<stype>2</stype>
325-
<level>2</level>
325+
<level>3</level>
326326
<risk>1</risk>
327327
<clause>1,2,3,8,9</clause>
328328
<where>1</where>
@@ -347,7 +347,7 @@
347347
<!-- It does not work against ORDER BY or GROUP BY clause -->
348348
<title>MySQL &gt;= 4.1 OR error-based - WHERE or HAVING clause (FLOOR)</title>
349349
<stype>2</stype>
350-
<level>2</level>
350+
<level>3</level>
351351
<risk>3</risk>
352352
<clause>1,8,9</clause>
353353
<where>1</where>
@@ -372,7 +372,7 @@
372372
<test>
373373
<title>MySQL OR error-based - WHERE or HAVING clause (FLOOR)</title>
374374
<stype>2</stype>
375-
<level>3</level>
375+
<level>4</level>
376376
<risk>3</risk>
377377
<clause>1,8,9</clause>
378378
<where>2</where>
@@ -969,7 +969,7 @@
969969
<test>
970970
<title>MySQL &gt;= 5.0 error-based - Parameter replace (FLOOR)</title>
971971
<stype>2</stype>
972-
<level>1</level>
972+
<level>2</level>
973973
<risk>1</risk>
974974
<clause>1,2,3,9</clause>
975975
<where>3</where>
@@ -1017,7 +1017,7 @@
10171017
<test>
10181018
<title>MySQL &gt;= 5.1 error-based - Parameter replace (EXTRACTVALUE)</title>
10191019
<stype>2</stype>
1020-
<level>3</level>
1020+
<level>2</level>
10211021
<risk>1</risk>
10221022
<clause>1,2,3,9</clause>
10231023
<where>3</where>
@@ -1258,7 +1258,7 @@
12581258
<test>
12591259
<title>MySQL &gt;= 5.0 error-based - ORDER BY, GROUP BY clause (FLOOR)</title>
12601260
<stype>2</stype>
1261-
<level>3</level>
1261+
<level>4</level>
12621262
<risk>1</risk>
12631263
<clause>2,3</clause>
12641264
<where>1</where>
@@ -1278,7 +1278,7 @@
12781278
<test>
12791279
<title>MySQL &gt;= 5.1 error-based - ORDER BY, GROUP BY clause (EXTRACTVALUE)</title>
12801280
<stype>2</stype>
1281-
<level>4</level>
1281+
<level>3</level>
12821282
<risk>1</risk>
12831283
<clause>2,3</clause>
12841284
<where>1</where>
@@ -1318,7 +1318,7 @@
13181318
<test>
13191319
<title>MySQL &gt;= 4.1 error-based - ORDER BY, GROUP BY clause (FLOOR)</title>
13201320
<stype>2</stype>
1321-
<level>2</level>
1321+
<level>3</level>
13221322
<risk>1</risk>
13231323
<clause>2,3</clause>
13241324
<where>1</where>

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
from thirdparty.six import unichr as _unichr
1919

2020
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
21-
VERSION = "1.4.12.0"
21+
VERSION = "1.4.12.1"
2222
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2323
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2424
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

0 commit comments

Comments
 (0)