Skip to content

Commit c815c2b

Browse files
Update modules/exploits/multi/http/avideo_wwbnindex_unauth_rce.rb
Co-authored-by: jheysel-r7 <[email protected]>
1 parent 7d2c06a commit c815c2b

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

modules/exploits/multi/http/avideo_wwbnindex_unauth_rce.rb

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,13 @@ def check
103103
return CheckCode::Unknown('Unable to extract AVideo version.') unless version_match && version_match[1]
104104

105105
version = Rex::Version.new(version_match[1])
106+
plugin_check = send_request_cgi({
107+
'uri' => normalize_uri(target_uri.path, 'plugin', 'WWBNIndex','submitIndex.php'),
108+
'method' => 'GET',
109+
})
110+
unless plugin_check&.code == 200
111+
CheckCode::Safe("Vulnerable plugin WWBNIndex was not detected")
112+
end
106113

107114
if version.between?(Rex::Version.new('12.4'), Rex::Version.new('14.2'))
108115
return CheckCode::Appears("Detected vulnerable AVideo version: #{version}, with vulnerable plugin WWBNIndex running.")

0 commit comments

Comments
 (0)