Land rapid7#4485, Drupageddon greedy regex fix

Author: wvu

modules/exploits/multi/http/drupal_drupageddon.rb

@@ -126,8 +126,8 @@ def sql_make_user_admin(user)
   end
 
   def extract_form_ids(content)
-    form_build_id = $1 if content =~ /name="form_build_id" value="(.+)" \/>/
-    form_token = $1 if content =~ /name="form_token" value="(.+)" \/>/
+    form_build_id = $1 if content =~ /name="form_build_id" value="(.+?)"/
+    form_token = $1 if content =~ /name="form_token" value="(.+?)"/
 
     vprint_debug("#{peer} - form_build_id: #{form_build_id}")
     vprint_debug("#{peer} - form_token: #{form_token}")