Skip to content

Commit 8259e8e

Browse files
authored
Update phpmailer_arg_injection.rb
Fixed regex to match legal name tags
1 parent ae8f1c3 commit 8259e8e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/exploits/multi/http/phpmailer_arg_injection.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -61,9 +61,9 @@ def initialize(info = {})
6161
register_advanced_options(
6262
[
6363
OptInt.new('WaitTimeout', [true, 'Seconds to wait to trigger the payload', 300])+
64-
OptString.new('NameField', [true, 'Name of the element for the Name field', 'name'], regex: /^[a-z_]([a-z0-9_-]{0,31}|[a-z0-9_-]{0,30}\$)$/),
65-
OptString.new('EmailField', [true, 'Name of the element for the Email field', 'email'] regex: /^[a-z_]([a-z0-9_-]{0,31}|[a-z0-9_-]{0,30}\$)$/),
66-
OptString.new('MessageField', [true, 'Name of the element for the Message field', 'message'] regex: /^[a-z_]([a-z0-9_-]{0,31}|[a-z0-9_-]{0,30}\$)$/)
64+
OptString.new('NameField', [true, 'Name of the element for the Name field', 'name'], regex: /^([^\t\n\f \/>"'=]+)$/),
65+
OptString.new('EmailField', [true, 'Name of the element for the Email field', 'email'] regex: /^([^\t\n\f \/>"'=]+)$/),
66+
OptString.new('MessageField', [true, 'Name of the element for the Message field', 'message'] regex: /^([^\t\n\f \/>"'=]+)$/)
6767
])
6868
end
6969

0 commit comments

Comments
 (0)