{"record":{"id":"d00ede5a340c0c4a","repo":"sqlmapproject/sqlmap","slug":"parameter-binding-is-not-supported-pass-a-fully-f-d00ede","errorCode":null,"errorMessage":"parameter binding is not supported; pass a fully-formed query string","messagePattern":"parameter binding is not supported; pass a fully-formed query string","errorType":"exception","errorClass":"NotSupportedError","httpStatus":null,"severity":"error","filePath":"extra/dbwire/tds.py","lineNumber":555,"sourceCode":"            raise InterfaceError(\"unexpected TDS token 0x%02x\" % token)\n\n    if error is not None:\n        if login:\n            raise OperationalError(\"(remote) %s\" % error)\n        raise ProgrammingError(\"(remote) %s\" % error)\n    return description, rows, affected\n\nclass Cursor(object):\n    def __init__(self, connection):\n        self.connection = connection\n        self.description = None\n        self.rowcount = -1\n        self._rows = []\n        self._pos = 0\n\n    def execute(self, query, params=None):\n        if params is not None:\n            raise NotSupportedError(\"parameter binding is not supported; pass a fully-formed query string\")\n        self.description, self.rowcount, self._rows, self._pos = None, -1, [], 0\n        self.description, self._rows, affected = self.connection._query(query)\n        # a result-producing statement reports what it returned; DML has no rows, so the server's\n        # DoneRowCount is the only place its affected-row count exists\n        self.rowcount = len(self._rows) if self.description is not None else (affected if affected is not None else -1)\n        return self\n\n    def fetchall(self):\n        retVal = self._rows[self._pos:]\n        self._pos = len(self._rows)\n        return retVal\n\n    def fetchone(self):\n        if self._pos >= len(self._rows):\n            return None\n        retVal = self._rows[self._pos]\n        self._pos += 1\n        return retVal","sourceCodeStart":537,"sourceCodeEnd":573,"githubUrl":"https://github.com/sqlmapproject/sqlmap/blob/0a35b20e3953d341be6c7ac75ccb0b3362540c8d/extra/dbwire/tds.py#L537-L573","documentation":"Error \"parameter binding is not supported; pass a fully-formed query string\" thrown in sqlmapproject/sqlmap.","triggerScenarios":"Thrown at extra/dbwire/tds.py:555 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"0a35b20e3953d341be6c7ac75ccb0b3362540c8d","analyzedAt":"2026-08-26T23:02:52.002Z","schemaVersion":2},"datasetVersion":"2026-08-27T03:17:27.898Z"}