Skip to content

Commit 19c4d5b

Browse files
committed
Remove hard coded target path
1 parent adb8098 commit 19c4d5b

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/unix/webapp/wp_ninja_forms_unauthenticated_file_upload.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ def enable_v3_functionality
5252
print_status 'Enabling vulnerable V3 functionality...'
5353
res = send_request_cgi(
5454
'method' => 'GET',
55-
'uri' => '/',
55+
'uri' => target_uri.path,
5656
'vars_get' => { 'nf-switcher' => 'upgrade' }
5757
)
5858

@@ -67,7 +67,7 @@ def disable_v3_functionality
6767
print_status 'Disabling vulnerable V3 functionality...'
6868
res = send_request_cgi(
6969
'method' => 'GET',
70-
'uri' => '/',
70+
'uri' => target_uri.path,
7171
'vars_get' => { 'nf-switcher' => 'rollback' }
7272
)
7373

0 commit comments

Comments
 (0)