Skip to content

Commit cb381ad

Browse files
authored
Land #20421, adds more reliable check in get_nonce function for auxiliary/scanner/http/wp_ultimate_member_sorting_sqli
Fix `get_nonce` in `auxiliary/scanner/http/wp_ultimate_member_sorting_sqli`
2 parents 0a531b4 + 541e8d6 commit cb381ad

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/auxiliary/scanner/http/wp_ultimate_member_sorting_sqli.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ def get_nonce
6262
'uri' => normalize_uri(target_uri.path, uri)
6363
})
6464

65-
next unless res&.code == 200
65+
next unless res&.code && res.code <= 500
6666

6767
page = res.get_html_document
6868

@@ -110,7 +110,7 @@ def get_directory_id(nonce)
110110
fail_with(Failure::NotFound, "Could not find a valid directory id within the range #{min_range} to #{max_range}")
111111
end
112112

113-
def run_host(_ip)
113+
def run
114114
# next line included for automatic inclusion into vulnerable plugins list
115115
# check_plugin_version_from_readme('ultimate-member', '2.8.3')
116116
print_status("Performing SQL injection for CVE-2024-1071 via the 'sorting' parameter...")

0 commit comments

Comments
 (0)