You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello
We need to have %16 for MS Access databases as %00 does not normally work specially in ASP language that terminates the string before passing it to the database query. Therefore, %16 is more generic than %00 for MS Access comment (https://www.owasp.org/index.php/Testing_for_MS_Access).
These are the lines that need to be changed:
File: lib/core/agent.py - Line 221
if Backend.getIdentifiedDbms() == DBMS.ACCESS and comment == GENERIC_SQL_COMMENT:
comment = "%16"
File: xml/queries.xml - Line 358
comment query="%16" query2="%00"
Activity
Implementation for an Issue #468