diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 751f297583c..1ebbb81c4c0 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -212,6 +212,10 @@ def checkSqlInjection(place, parameter, value): }) if stype == PAYLOAD.TECHNIQUE.UNION: + if "char" not in test.request: + logger.debug("skipping malformed UNION test '%s' because its request has no character" % title) + continue + configUnion(test.request.char) if "[CHAR]" in title: diff --git a/lib/core/settings.py b/lib/core/settings.py index 1697989c9da..05603e09e06 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six # sqlmap version (...) -VERSION = "1.10.8.56" +VERSION = "1.10.8.57" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)