Major bug fix to forge SQL injection payload on Oracle

bdamele · bdamele · commit fd7cb9101c78 · 2009-01-13T23:15:57.000Z
diff --git a/lib/core/agent.py b/lib/core/agent.py
@@ -334,7 +334,7 @@ def concatQuery(self, query):
             elif fieldsNoSelect:
                 concatQuery = "'%s'||%s||'%s'" % (temp.start, concatQuery, temp.stop)
 
-            if kb.dbms == "Oracle" and ( fieldsSelect or fieldsNoSelect ):
+            if kb.dbms == "Oracle" and " FROM " not in concatQuery and ( fieldsSelect or fieldsNoSelect ):
                 concatQuery += " FROM DUAL"
 
         elif kb.dbms == "Microsoft SQL Server":
