Fixes #922

commixproject · Jun 13, 2024 · 8d82dad · 8d82dad
1 parent 4f26543
commit 8d82dad
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/src/core/requests/parameters.py b/src/core/requests/parameters.py
@@ -152,7 +152,7 @@ def multi_params_get_value(parameter):
  # Replace the value of parameter with INJECT_HERE tag
  if len(value) == 0:
  if not menu.options.skip_empty:
- all_params[param] = ''.join(all_params[param]) + settings.INJECT_TAG
+ all_params[param] = ''.join(all_params[param] + settings.INJECT_TAG)
  else:
  all_params[param] = ''.join(all_params[param]).replace(value, value + settings.INJECT_TAG)
  all_params[param - 1] = ''.join(all_params[param - 1]).replace(settings.INJECT_TAG, "")
@@ -409,7 +409,7 @@ def json_format(parameter):
  elif settings.IS_XML:
  all_params[param] = ''.join(all_params[param]).replace("></", ">" + settings.INJECT_TAG + "</")
  else:
- all_params[param] = ''.join(all_params[param]) + settings.INJECT_TAG
+ all_params[param] = ''.join(all_params[param] + settings.INJECT_TAG)
  else:
  all_params[param] = ''.join(all_params[param]).replace(value, value + settings.INJECT_TAG)
  if settings.IS_JSON and len(all_params[param].split("\":")) == 2:
@@ -621,7 +621,7 @@ def multi_params_get_value(parameter):
  # Replace the value of parameter with INJECT tag
  if len(value) == 0:
  if not menu.options.skip_empty:
- all_params[param] = ''.join(all_params[param]) + settings.INJECT_TAG
+ all_params[param] = ''.join(all_params[param] + settings.INJECT_TAG)
  else:
  all_params[param] = ''.join(all_params[param]).replace(value, value + settings.INJECT_TAG)
  all_params[param - 1] = ''.join(all_params[param - 1]).replace(settings.INJECT_TAG, "")

diff --git a/src/utils/settings.py b/src/utils/settings.py
@@ -247,7 +247,7 @@ def sys_argv_errors():
 DESCRIPTION = "The command injection exploiter"
 AUTHOR = "Anastasios Stasinopoulos"
 VERSION_NUM = "4.0"
-REVISION = "67"
+REVISION = "68"
 STABLE_RELEASE = False
 VERSION = "v"
 if STABLE_RELEASE: