Skip to content

Commit c75ffb4

Browse files
committed
Update documentation
1 parent f867502 commit c75ffb4

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

documentation/modules/exploit/multi/http/spip_bigup_unauth_rce.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ docker run --name casse-spip -p 8000:80 \
6060
## Options
6161

6262
- **FORM_PAGE**: This option allows you to specify a custom page on the target SPIP installation that contains a form.
63-
By default, the module will automatically check the `login` and `contact` pages for forms,
63+
By default, the module will automatically check the `login`, `spip_pass`, and `contact` pages for forms,
6464
but if you know of another page that contains a form, you can specify it here.
6565
For example, if an article page contains a form, you can set this option like so:
6666

@@ -70,7 +70,8 @@ set FORM_PAGE /spip.php?article1
7070

7171
This will instruct the module to look for the form data on `/spip.php?article1`.
7272
If the specified page contains the vulnerable form, the module will proceed with the exploitation.
73-
This option is particularly useful when the default pages (`login` and `contact`) do not contain the form or are not accessible.
73+
This option is particularly useful when the default pages (`login`, `spip_pass` and `contact`)
74+
do not contain the form or are not accessible.
7475

7576
## Scenarios
7677

0 commit comments

Comments
 (0)