Re: [sqlmap-users] GET Parameter Splitting

[Miroslav S. <mir...@gm...>]

Hi.

Just double checked and everything works as expected. Could you please send
your complete line you use?

Kind regards,
Miroslav Stampar

p.s. have you enclosed URL with double quotes?

On Tue, Jan 22, 2013 at 10:08 PM, Thunder Chunky <hac...@gm...>wrote:

> Hi Guys,
>
> The current URL that I am testing has several parameters the issue is that
> for the request to succeed all parameters need to be sent.
>
> URL = http://site.com/script?ex1=true&ex2=test&ex3=blah
>
> Unfortunately it appears that sqlmap splits the parameters and tests for
> the injection on each one individually i.e.
>
> Test 1 = http://site.com/script?ex1=true ' UNION
> Test 2 = http://site.com/script?ex2=test ' UNION
>
> Is there any way to make sqlmap perform the injection inline with the URL,
> thus sending all parameters to avoid the 404?
>
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnnow-d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm