@@ -21,8 +21,8 @@ def initialize(info = {})
21
21
in admin-ajax.php.
22
22
} ,
23
23
'Author' => [
24
- 'Muhamad Visat' , # Vulnerability Discovery
25
- 'Valentin Lobstein' # Metasploit Module
24
+ 'Muhamad Visat' , # Vulnerability discovery
25
+ 'Valentin Lobstein' # Metasploit module
26
26
] ,
27
27
'License' => MSF_LICENSE ,
28
28
'References' => [
@@ -31,10 +31,6 @@ def initialize(info = {})
31
31
[ 'URL' , 'https://cloud.projectdiscovery.io/library/CVE-2025-2011' ] ,
32
32
[ 'URL' , 'https://plugins.trac.wordpress.org/browser/depicter/trunk/app/src/Controllers/Ajax/LeadsAjaxController.php?rev=3156664#L179' ]
33
33
] ,
34
- 'Actions' => [
35
- [ 'SQLi' , { 'Description' => 'Perform SQL Injection via admin-ajax.php?s=' } ]
36
- ] ,
37
- 'DefaultAction' => 'SQLi' ,
38
34
'DefaultOptions' => {
39
35
'VERBOSE' => true ,
40
36
'COUNT' => 1
@@ -69,7 +65,7 @@ def get_sqli_object
69
65
'perpage' => rand ( 10 ..50 ) . to_s ,
70
66
'page' => rand ( 1 ..3 ) . to_s ,
71
67
'orderBy' => 'source_id' ,
72
- 'order' => [ ' ASC' , ' DESC' ] . sample ,
68
+ 'order' => %w[ ASC DESC ] . sample ,
73
69
'dateStart' => '' ,
74
70
'dateEnd' => '' ,
75
71
'sources' => ''
0 commit comments