Skip to content

Commit 3f25c27

Browse files
author
h00die
committed
2 void-in fixes of 3
1 parent ddfd015 commit 3f25c27

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/linux/http/tiki_calendar_exec.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ def initialize(info = {})
1515
info,
1616
'Name' => 'Tiki-Wiki CMS Calendar Command Execution',
1717
'Description' => %q(
18-
Tiki-Wiki CMS's calendar module contains a rmeote code execution
18+
Tiki-Wiki CMS's calendar module contains a remote code execution
1919
vulnerability within the viewmode GET parameter.
2020
The calendar module is NOT enabled by default. When enbled,
2121
the default permissions are set to NOT allow anonymous users
@@ -64,7 +64,7 @@ def authenticate
6464
'uri' => normalize_uri(target_uri.path, 'tiki-login_scr.php'),
6565
'method' => 'GET'
6666
)
67-
cookie = res.get_cookies
67+
cookie = res ? res.get_cookies : ''
6868
# if we have creds, login with them
6969
vprint_status('Attempting Login')
7070
res = send_request_cgi(

0 commit comments

Comments
 (0)