Skip to content

Commit 326be0c

Browse files
committed
Land rapid7#5164, improved WordPress readme detection
2 parents 26f2b35 + dc8f266 commit 326be0c

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

lib/msf/http/wordpress/version.rb

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -107,18 +107,17 @@ def check_version_from_readme(type, name, fixed_version = nil, vuln_introduced_v
107107
fail("Unknown readme type #{type}")
108108
end
109109

110-
readme_url = normalize_uri(target_uri.path, wp_content_dir, folder, name, 'readme.txt')
111-
res = send_request_cgi(
112-
'uri' => readme_url,
113-
'method' => 'GET'
114-
)
115-
116-
if res.nil? || res.code != 200
117-
readme_url = normalize_uri(target_uri.path, wp_content_dir, folder, name, 'Readme.txt')
110+
readmes = ['readme.txt', 'Readme.txt', 'README.txt']
111+
112+
res = nil
113+
readmes.each do |readme_name|
114+
readme_url = normalize_uri(target_uri.path, wp_content_dir, folder, name, readme_name)
115+
vprint_status("#{peer} - Checking #{readme_url}")
118116
res = send_request_cgi(
119117
'uri' => readme_url,
120118
'method' => 'GET'
121119
)
120+
break if res && res.code == 200
122121
end
123122

124123
if res.nil? || res.code != 200

0 commit comments

Comments
 (0)