Fixes commixproject#645

stasinopoulos · stasinopoulos · commit d2a1b082ad62 · 2021-06-23T09:11:07.000+03:00
diff --git a/src/core/injections/controller/checks.py b/src/core/injections/controller/checks.py
@@ -1275,9 +1275,13 @@ def is_empty(multi_parameters, http_request_method):
   empty_parameters = []
   multi_params = [s for s in multi_parameters]
   if settings.IS_JSON:
-    multi_params = ','.join(multi_params)
-    json_data = json.loads(multi_params, object_pairs_hook=OrderedDict)
-    multi_params = flatten(json_data)
+    try:
+      multi_params = ','.join(multi_params)
+      json_data = json.loads(multi_params, object_pairs_hook=OrderedDict)
+      multi_params = flatten(json_data)
+    except ValueError as err_msg:
+      print(settings.print_critical_msg(err_msg))
+      raise SystemExit()
   for empty in multi_params:
     try:
       if settings.IS_JSON:
diff --git a/src/utils/settings.py b/src/utils/settings.py
@@ -216,7 +216,7 @@ def sys_argv_errors():
 DESCRIPTION = "The command injection exploiter"
 AUTHOR  = "Anastasios Stasinopoulos"
 VERSION_NUM = "3.3"
-REVISION = "39"
+REVISION = "40"
 STABLE_RELEASE = False
 if STABLE_RELEASE:
   VERSION = "v" + VERSION_NUM + "-stable"
