Re: [sqlmap-users] Trouble With an Injection

2011-12-16 Thread Chris Oakley
Thanks to all. Definitely a false positive following all your advice and reasoning. Cheers. On 15 December 2011 10:14, Miroslav Stampar wrote: > Hi. > > I believe that in your case that "appears to be" caused a little > misguidance. With the latest commit that message should be restrained to >

Re: [sqlmap-users] Trouble With an Injection

2011-12-15 Thread Miroslav Stampar
Hi. I believe that in your case that "appears to be" caused a little misguidance. With the latest commit that message should be restrained to 1 appearance per target, so there won't be such large number of those. "Appears to be" is just a friendly log message. Be sure that sqlmap checks that "app

Re: [sqlmap-users] Trouble With an Injection

2011-12-14 Thread Robin Wood
On 14 December 2011 15:51, Chris Oakley wrote: > Hi All > > I'm having problems with an injection that I think is real. > > It's a standard POST request with one of the parameters of the data sent > being vulnerable.  This all happens in an unauthenticated area of the > application, so there's no

[sqlmap-users] Trouble With an Injection

2011-12-14 Thread Chris Oakley
Hi All I'm having problems with an injection that I think is real. It's a standard POST request with one of the parameters of the data sent being vulnerable. This all happens in an unauthenticated area of the application, so there's no need to set the cookie value etc. The injection point was f