Skip to content

Commit af8ac2f

Browse files
committed
There's a bug here, can you tell?
Need to be aware of what happens when no version is captured.
1 parent fcad2c3 commit af8ac2f

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

modules/exploits/unix/webapp/invision_pboard_unserialize_exec.rb

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ def initialize(info = {})
2929
3030
The exploit has been tested successfully on Invision IP.Board 3.3.4.
3131
},
32-
'Author' =>
32+
'Author' =>
3333
[
3434
'EgiX', # Vulnerability discovery and PoC
3535
'juan vazquez', # Metasploit module
@@ -74,6 +74,7 @@ def check
7474
return Exploit::CheckCode::Unknown if not res
7575

7676
version = res.body.scan(/Community Forum Software by IP\.Board (\d+)\.(\d+).(\d+)/).flatten
77+
return Exploit::CheckCode::Safe if version.empty?
7778
version = version.map {|e| e.to_i}
7879

7980
# We only want major version 3

0 commit comments

Comments
 (0)