Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/multi/http/wp_givewp_rce.rb

Summary

Maintainability
A
3 hrs
Test Coverage

Method initialize has 48 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'GiveWP Unauthenticated Donation Process Exploit',
Severity: Minor
Found in modules/exploits/multi/http/wp_givewp_rce.rb - About 1 hr to fix

    Method send_exploit_request has 29 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def send_exploit_request(give_form_id, give_form_hash, give_price_id, give_amount)
    final_payload = format(
      'O:19:"Stripe\\\\\\\\StripeObject":1:{s:10:"\\0*\\0_values";a:1:{s:3:"foo";' \
      'O:62:"Give\\\\\\\\PaymentGateways\\\\\\\\DataTransferObjects\\\\\\\\GiveInsertPaymentData":1:{' \
      's:8:"userInfo";a:1:{s:7:"address";O:4:"Give":1:{s:12:"\\0*\\0container";' \
    Severity: Minor
    Found in modules/exploits/multi/http/wp_givewp_rce.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status