diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md index 51c08a7e9..7ee88f2f4 100644 --- a/doc/CHANGELOG.md +++ b/doc/CHANGELOG.md @@ -53,6 +53,9 @@ * Added time-based payloads for CUBRID. * Added out-of-band DNS channels for H2 and ClickHouse. * Added PostgreSQL command execution through a PL extension. +* Added the running of non-query statements without stacked queries through a gadget. On PostgreSQL, when the `dblink` extension is present, `--sql-query`, `--file-write`, `--os-cmd`, and `--os-shell` now work from a plain (e.g. boolean-based) injection point. +* Added file read and file write support for SQLite through the `fileio` extension functions `readfile` and `writefile`. +* Added the data access and the security type of a routine to the output of `--procs` on MySQL and PostgreSQL, so a routine that runs as its definer or that modifies data stands out. * Added the tamper scripts `blindbinary`, `dollarquote`, `infoschema2innodb`, `oraclequote`, and `sign`. ## Fewer dependencies diff --git a/lib/core/settings.py b/lib/core/settings.py index 15d8df1c9..fb7a90de7 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from lib.core.enums import OS from thirdparty import six # sqlmap version (...) -VERSION = "1.10.8.49" +VERSION = "1.10.8.50" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)