From 1192d266c807df76e5502aa64fb003db4bdb0c60 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Miroslav=20=C5=A0tampar?= Date: Fri, 28 Aug 2026 09:44:22 +0200 Subject: [PATCH] Update related to the #6099 --- lib/controller/checks.py | 4 ++++ lib/core/settings.py | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 751f297583c..1ebbb81c4c0 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -212,6 +212,10 @@ def checkSqlInjection(place, parameter, value): }) if stype == PAYLOAD.TECHNIQUE.UNION: + if "char" not in test.request: + logger.debug("skipping malformed UNION test '%s' because its request has no character" % title) + continue + configUnion(test.request.char) if "[CHAR]" in title: diff --git a/lib/core/settings.py b/lib/core/settings.py index 1697989c9da..05603e09e06 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six # sqlmap version (...) -VERSION = "1.10.8.56" +VERSION = "1.10.8.57" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)