Skip to content

Commit 621e85a

Browse files
committed
Correct version
1 parent d334797 commit 621e85a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/unix/webapp/php_wordpress_foxypress.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ def initialize(info = {})
1919
This module exploits an arbitrary PHP code execution flaw in the WordPress
2020
blogging software plugin known as Foxypress. The vulnerability allows for arbitrary
2121
file upload and remote code execution via the uploadify.php script. The Foxypress
22-
plug-in versions 0.4.2.1 and below are vulnerable.
22+
plug-in versions 0.4.1.1 to 0.4.2.1 are vulnerable.
2323
),
2424
'Author' =>
2525
[
@@ -36,7 +36,7 @@ def initialize(info = {})
3636
'Privileged' => false,
3737
'Platform' => 'php',
3838
'Arch' => ARCH_PHP,
39-
'Targets' => [['Foxypress <= 0.4.2.1', {}]],
39+
'Targets' => [['Foxypress 0.4.1.1 - 0.4.2.1', {}]],
4040
'DisclosureDate' => 'Jun 05 2012',
4141
'DefaultTarget' => 0))
4242
end

0 commit comments

Comments
 (0)