rapid7/metasploit-framework

View on GitHub
modules/exploits/multi/http/netwin_surgeftp_exec.rb

Summary

Maintainability
A
3 hrs
Test Coverage

Method http_send_command has 47 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def http_send_command(command)
    res = send_request_cgi(
    {
      'uri'     => '/cgi/surgeftpmgr.cgi',
      'method'  => 'POST',
Severity: Minor
Found in modules/exploits/multi/http/netwin_surgeftp_exec.rb - About 1 hr to fix

    Method initialize has 38 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info = {})
        super(update_info(info,
          'Name'           => 'Netwin SurgeFTP Remote Command Execution',
          'Description'    => %q{
              This module exploits a vulnerability found in Netwin SurgeFTP, version 23c8
    Severity: Minor
    Found in modules/exploits/multi/http/netwin_surgeftp_exec.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status