Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/multi/http/wp_responsive_thumbnail_slider_upload.rb

Summary

Maintainability
A
2 hrs
Test Coverage

Method initialize has 31 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info={})
    super(update_info(info,
      'Name'           => "WordPress Responsive Thumbnail Slider Arbitrary File Upload",
      'Description'    => %q{
        This module exploits an arbitrary file upload vulnerability in Responsive Thumbnail Slider
Severity: Minor
Found in modules/exploits/multi/http/wp_responsive_thumbnail_slider_upload.rb - About 1 hr to fix

    Method upload_payload has 26 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def upload_payload(cookies)
    manage_uri = 'wp-admin/admin.php?page=responsive_thumbnail_slider_image_management'
    file_payload = get_write_exec_payload(:unlink_self => true)
    file_name = "#{rand_text_alpha(5)}.php"
    Severity: Minor
    Found in modules/exploits/multi/http/wp_responsive_thumbnail_slider_upload.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status