Skip to content

Commit 90f0eec

Browse files
author
Brent Cook
committed
Land rapid7#7325, Fix missing form inputs in skybluecanvas_exec
2 parents 022ab74 + a7103f2 commit 90f0eec

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

modules/exploits/unix/webapp/skybluecanvas_exec.rb

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ def check
6565

6666
res = send_request_raw('uri' => uri)
6767

68-
if res and res.body =~ /[1.1 r248]/
68+
if res && res.body.include?('SkyBlueCanvas [1.1 r248]')
6969
vprint_good("SkyBlueCanvas CMS 1.1 r248-xx found")
7070
return Exploit::CheckCode::Appears
7171
end
@@ -89,7 +89,9 @@ def exploit
8989
'email' => rand_text_alphanumeric(10),
9090
'subject' => rand_text_alphanumeric(10),
9191
'message' => rand_text_alphanumeric(10),
92-
'action' => 'Send'
92+
'action' => 'Send',
93+
'mailinglist' => '0',
94+
'cc' => '0'
9395
}
9496
})
9597
end

0 commit comments

Comments
 (0)