Update modules/exploits/multi/http/vbulletin_replace_ad_template_rce.rb

Chocapikk · bwatters-r7 · web-flow · commit f053d993f7e4 · 2025-05-29T15:59:00.000+02:00
Co-authored-by: Brendan &lt;bwatters@rapid7.com&gt;
diff --git a/modules/exploits/multi/http/vbulletin_replace_ad_template_rce.rb b/modules/exploits/multi/http/vbulletin_replace_ad_template_rce.rb
@@ -105,8 +105,9 @@ def inject_and_trigger(mode, payload: nil)
     )
 
     if mode == :check
-      return nil unless inj&.code == 200
+      return false unless inj&.code == 200
       return true if inj.body.match?(pattern)
+      false
     end
 
     render_vars = { 'routestring' => "ajax/render/ad_#{location}" }

Original file line number	Diff line number	Diff line change
`@@ -105,8 +105,9 @@ def inject_and_trigger(mode, payload: nil)`
`105`	`105`	`)`
`106`	`106`
`107`	`107`	`if mode == :check`
`108`		`- return nil unless inj&.code == 200`
	`108`	`+ return false unless inj&.code == 200`
`109`	`109`	`return true if inj.body.match?(pattern)`
	`110`	`+ false`
`110`	`111`	`end`
`111`	`112`
`112`	`113`	`render_vars = { 'routestring' => "ajax/render/ad_#{location}" }`