Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug Report: Unhandled exception "NameError: name 'filename' is not defined" (#e49cb282) #969

Closed
commixreporter opened this issue Oct 11, 2024 · 0 comments
Assignees
Milestone

Comments

@commixreporter
Copy link

Commix version: 4.0-dev#99
Python version: 3.10.12
Operating system: posix
Command line: commix.py --url=************************************ 
Traceback (most recent call last):
  File \"session_handler.py", line 107, in import_injection_points
    conn.execute("CREATE TABLE IF NOT EXISTS " + table_name(url) + "_ip" + \
sqlite3.OperationalError: near "?": syntax error

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File \"commix.py", line 36, in <module>
    main()
  File \"commix.py", line 31, in main
    import src.core.main
  File \"main.py", line 899, in <module>
    main(filename, url, http_request_method)
  File \"main.py", line 560, in main
    controller.do_check(url, http_request_method, filename)
  File \"controller.py", line 743, in do_check
    perform_checks(url, http_request_method, filename)
  File \"controller.py", line 706, in perform_checks
    data_checks(url, http_request_method, filename, timesec)
  File \"controller.py", line 627, in data_checks
    if get_request(url, http_request_method, filename, timesec) is None:
  File \"controller.py", line 590, in get_request
    do_injection(found_url, settings.HTTPMETHOD.GET, header_name, url, http_request_method, filename, timesec)
  File \"controller.py", line 576, in do_injection
    injection_proccess(url, check_parameter, http_request_method, filename, timesec)
  File \"controller.py", line 400, in injection_proccess
    classic_command_injection_technique(url, timesec, filename, http_request_method)
  File \"controller.py", line 220, in classic_command_injection_technique
    if cb_handler.exploitation(url, timesec, filename, http_request_method, injection_type, technique) != False:
  File \"cb_handler.py", line 33, in exploitation
    return cb_injection_handler(url, timesec, filename, http_request_method, injection_type, technique)
  File \"cb_handler.py", line 26, in cb_injection_handler
    return handler.do_results_based_proccess(url, timesec, filename, http_request_method, injection_type, technique)
  File \"handler.py", line 646, in do_results_based_proccess
    session_handler.import_injection_points(url, technique, injection_type, separator, shell[0], vuln_parameter, prefix, suffix, TAG, alter_shell, payload, http_request_method, url_time_response=0, timesec=0, exec_time=0, output_length=0, is_vulnerable=settings.INJECTION_LEVEL)
  File \"session_handler.py", line 131, in import_injection_points
    checks.quit(filename, url, _ = False)
NameError: name 'filename' is not defined
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants