Skip to content

Conversation

raimundmuc
Copy link
Contributor

I have a demo setup with a vulnerable webapp with a Postgres DB in the backend. The webapp is vulnerable for stacked-queries SQLi. When I try to --udf-inject, Sqlmap complains that "PostgreSQL does not support file upload with UNION query SQL injection technique".
This used to work in former Sqlmap releases.

I did a "git bisect" to find the commit that broke my scenario, it is b3cdec5. The relevant change is in the file plugins/dbms/postgresql/filesystem.py, where the function unionWriteFile was renamed to writeFile.
This pull request reverts the chance and fixes the problem for me.

@stamparm stamparm merged commit f947c5f into sqlmapproject:master Nov 30, 2019
@stamparm
Copy link
Member

Thx for this. Looking into the commit my only conclusion is that I've messed the name along the way

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants