Fix STUDYNAME empty check

vognik · web-flow · commit 85e97aaaf59b · 2025-07-21T13:14:19.000+03:00
diff --git a/modules/exploits/multi/http/lighthouse_studio_unauth_rce_cve_2025_34300.rb b/modules/exploits/multi/http/lighthouse_studio_unauth_rce_cve_2025_34300.rb
@@ -105,7 +105,7 @@ def check
     vars = {
       'hid_javascript' => '1'
     }
-    vars['hid_studyname'] = datastore['STUDYNAME'] if datastore['STUDYNAME']
+    vars['hid_studyname'] = datastore['STUDYNAME'] unless datastore['STUDYNAME'].to_s.strip.empty?
 
     res = send_request_cgi(
       'uri' => normalize_uri(target_uri.path),

Original file line number	Diff line number	Diff line change
`@@ -105,7 +105,7 @@ def check`
`105`	`105`	`vars = {`
`106`	`106`	`'hid_javascript' => '1'`
`107`	`107`	`}`
`108`		`- vars['hid_studyname'] = datastore['STUDYNAME'] if datastore['STUDYNAME']`
	`108`	`+ vars['hid_studyname'] = datastore['STUDYNAME'] unless datastore['STUDYNAME'].to_s.strip.empty?`
`109`	`109`
`110`	`110`	`res = send_request_cgi(`
`111`	`111`	`'uri' => normalize_uri(target_uri.path),`