HQLmap icon indicating copy to clipboard operation
HQLmap copied to clipboard

table_exists methed is not perfect

Open nibiwodong opened this issue 6 years ago • 0 comments

def table_exists(message):
    if ('is not mapped' in message):
        return False
    else:
        return True

The method of checking table exists is check if 'is not mapped' string in response. I'm doubt about this method, and I have an fail example. This is the request url

?isAsc=false&orderBy=name&pageNum=1&pageSize=10

The response is

{"result":"failed","responseCode":"","data":"","errorMsg":"org.hibernate.QueryException: could not resolve property: name of:com.xxx\n\tat org.hibernate.persister.entity.AbstractPropertyMapping.propertyException(AbstractPropertyMapping.java:83

This request is order by a column, if the column does not exist, it will response this exception. I do not think this is a sqli vulnerability.

nibiwodong avatar Oct 10 '18 09:10 nibiwodong