Authenticate against the page to modify

jvazquez-r7 · jvazquez-r7 · commit 044bd2101f85 · 2013-06-17T20:34:02.000-05:00
diff --git a/modules/exploits/unix/webapp/moinmoin_twikidraw.rb b/modules/exploits/unix/webapp/moinmoin_twikidraw.rb
@@ -117,7 +117,7 @@ def on_new_session(session)
 	def do_login(username, password)
 		res = send_request_cgi({
 			'method'   => 'POST',
-			'uri'      => normalize_uri(@base),
+			'uri'      => normalize_uri(@base, @page),
 			'vars_post' =>
 				{
 					'action' => 'login',

Original file line number	Diff line number	Diff line change
`@@ -117,7 +117,7 @@ def on_new_session(session)`
`117`	`117`	`def do_login(username, password)`
`118`	`118`	`res = send_request_cgi({`
`119`	`119`	`'method' => 'POST',`
`120`		`- 'uri' => normalize_uri(@base),`
	`120`	`+ 'uri' => normalize_uri(@base, @page),`
`121`	`121`	`'vars_post' =>`
`122`	`122`	`{`
`123`	`123`	`'action' => 'login',`