Re: [sqlmap-users] errors

[Bernardo D. A. G. <ber...@gm...>]

Hi,

On Tue, Mar 3, 2009 at 05:58, Волк <v0l...@gm...> wrote:
>
> [04:03:08] [ERROR] unhandled exception in sqlmap/0.6.4, please copy the command line and the following text and send by e-mail to
> sql...@li.... The developers will fix it as soon as possible:
> sqlmap version: 0.6.4
> Python version: 2.4.1
> Operating system: linux2
> Traceback (most recent call last):
>   File "./sqlmap.py", line 81, in main
>     start()
>   File "/usr/share/.pizdec/sqlmap/lib/controller/controller.py", line 255, in start
>     action()
>   File "/usr/share/.pizdec/sqlmap/lib/controller/action.py", line 137, in action
>     conf.dbmsHandler.osShell()
>   File "/usr/share/.pizdec/sqlmap/plugins/dbms/mysql.py", line 448, in osShell
>     page, _ = Request.getPage(url=uploaderUrl, direct=True)
>   File "/usr/share/.pizdec/sqlmap/lib/request/connect.py", line 128, in getPage
>     conn           = urllib2.urlopen(req)
>   File "/usr/lib/python2.4/urllib2.py", line 130, in urlopen
>     return _opener.open(url, data)
>   File "/usr/lib/python2.4/urllib2.py", line 358, in open
>     response = self._open(req, data)
>   File "/usr/lib/python2.4/urllib2.py", line 376, in _open
>     '_open', req)
>   File "/usr/lib/python2.4/urllib2.py", line 337, in _call_chain
>     result = func(*args)
>   File "/usr/lib/python2.4/urllib2.py", line 1021, in http_open
>     return self.do_open(httplib.HTTPConnection, req)
>   File "/usr/lib/python2.4/urllib2.py", line 980, in do_open
>     h = http_class(host) # will parse host:port
>   File "/usr/lib/python2.4/httplib.py", line 582, in __init__
>     self._set_hostport(host, port)
>   File "/usr/lib/python2.4/httplib.py", line 594, in _set_hostport
>     raise InvalidURL("nonnumeric port: '%s'" % host[i+1:])
> InvalidURL: nonnumeric port: '80themes'

It seems that you have a typo in your -u argument ('url' option if
you're using the configuration file option -c). Maybe that you
accidentaly typed the url like 'www.yoursite.tld:80theses..' without
the slash.
Otherwise, if you can confirm that this is not the case, maybe there
is an issue in the web backdoor upload functionality that I missed
when I tested on Python 2.5 and Python 2.6. Could you please give it a
try to a more recent Python version and let me know if the issue
persists? Thanks in advance.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +447788962949 (UK), +393493821385 (IT)
PGP Key ID: 0x05F5A30F