Skip to content

Commit 68521da

Browse files
committed
Fix check method.
1 parent 0ba03f7 commit 68521da

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

modules/exploits/multi/http/bolt_file_upload.rb

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,13 +47,17 @@ def initialize(info = {})
4747
end
4848

4949
def check
50+
cookie = bolt_login(username, password)
51+
return Exploit::CheckCode::Detected unless cookie
52+
5053
res = send_request_cgi(
5154
'method' => 'GET',
52-
'uri' => normalize_uri(target_uri.path, 'bolt', 'login')
55+
'uri' => normalize_uri(target_uri.path, 'bolt'),
56+
'cookie' => cookie
5357
)
5458

55-
if res && res.code == 200 && res.body.include?('Cookies are required to log on to Bolt')
56-
return Exploit::CheckCode::Appears
59+
if res && res.code == 200 && res.body.include?('Bolt 2.2.4</b>: Sophisticated, lightweight & simple CMS')
60+
return Exploit::CheckCode::Vulnerable
5761
end
5862
Exploit::CheckCode::Safe
5963
end

0 commit comments

Comments
 (0)