Skip to content

Commit e0383b4

Browse files
committed
Add report_vuln
1 parent e93b4d4 commit e0383b4

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

modules/exploits/multi/http/clinic_pms_sqli_to_rce.rb

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ class MetasploitModule < Msf::Exploit::Remote
88
include Msf::Exploit::Remote::HttpClient
99
include Msf::Exploit::PhpEXE
1010
include Msf::Exploit::FileDropper
11+
include Msf::Auxiliary::Report
1112

1213
def initialize(info = {})
1314
super(
@@ -152,6 +153,13 @@ def trigger_payload
152153
logout
153154
login_sqli
154155

156+
report_vuln(
157+
host: datastore['RHOSTS'],
158+
name: name,
159+
refs: references,
160+
info: 'The target is vulnerable to CVE-2025-3096.'
161+
)
162+
155163
res = send_request_cgi({
156164
'uri' => normalize_uri(target_uri.path + '/update_user.php'),
157165
'method' => 'GET',

0 commit comments

Comments
 (0)