[sqlmap-users] bug: Url is not parsed correctly

[Kasper F. <th...@ma...>]

Hello sqlmap users.

It seems that sqlmap is not parsing the url correctly, see following output:

C:\Users\foens\Desktop\sqlmap>sqlmap.py -u 
http://<host>/conferences/viewpaper.php?id=2387&cf=16

     sqlmap/0.9-dev - automatic SQL injection and database takeover tool
     http://sqlmap.sourceforge.net

[*] starting at: 12:32:56

[12:32:56] [INFO] using 
'C:\Users\foens\Desktop\sqlmap\output\<host>\session' as session file
[12:32:56] [INFO] testing connection to the target url
[12:32:56] [INFO] testing if the url is stable, wait a few seconds
[12:32:58] [INFO] url is stable
[12:32:58] [INFO] testing if User-Agent parameter 'User-Agent' is dynamic
[12:32:58] [WARNING] User-Agent parameter 'User-Agent' is not dynamic
[12:32:58] [INFO] testing if GET parameter 'id' is dynamic
[12:32:58] [WARNING] GET parameter 'id' is not dynamic

[*] shutting down at: 12:32:58

'cf' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\foens\Desktop\sqlmap>

I have anonyminized the host. It seems that the "cf" parameter is being 
used as a program in some script. I am running on Windows.

/Kasper