Method check has a Cognitive Complexity of 31 (exceeds 5 allowed). Consider refactoring.

Open

  def check
    # used to ensure cleanup only runs against flexdotnetcms targets
    @skip_cleanup = true

    # visit login the page to get the necessary cookies

• Read up
  Read up

Method check has 103 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def check
    # used to ensure cleanup only runs against flexdotnetcms targets
    @skip_cleanup = true

    # visit login the page to get the necessary cookies

Method initialize has 63 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'FlexDotnetCMS Arbitrary ASP File Upload',

File flexdotnetcms_upload_exec.rb has 256 lines of code (exceeds 250 allowed). Consider refactoring.

Open

class MetasploitModule < Msf::Exploit::Remote
  Rank = ExcellentRanking
  include Msf::Exploit::Remote::HttpClient
  include Msf::Exploit::EXE
  prepend Msf::Exploit::Remote::AutoCheck

Method rename_test_file_and_add_payload has a Cognitive Complexity of 10 (exceeds 5 allowed). Consider refactoring.

Open

  def rename_test_file_and_add_payload
    print_status("Renaming #{@payload_txt} to #{@payload_asp} again, this time adding the payload")

    # load the file in the file editor in order to obtain tokens required for renaming it
    res = send_request_cgi({

• Read up
  Read up

Avoid too many return statements within this method.

Open

      return CheckCode::Detected('Received unexpected response while trying to follow redirect to /Admin/')

Avoid too many return statements within this method.

Open

      return CheckCode::Detected('Failed to authenticate to the server.')

Avoid too many return statements within this method.

Open

      return CheckCode::Detected("Connection failed while trying to upload test file #{@payload_txt}")

Avoid too many return statements within this method.

Open

      return CheckCode::Detected('Connection failed')

Avoid too many return statements within this method.

Open

      return CheckCode::Detected("Received unexpected response while trying to obtain tokens necessary for renaming #{@payload_txt}")

Avoid too many return statements within this method.

Open

      return CheckCode::Detected("Received unexpected response while trying to open test file #{@payload_txt} in the file editor")

Avoid too many return statements within this method.

Open

      return CheckCode::Detected("Received unexpected response while trying to upload test file #{@payload_txt}")

Avoid too many return statements within this method.

Open

      return CheckCode::Safe('Target is FlexDotnetCMS v1.5.9 or higher')

Avoid too many return statements within this method.

Open

      return CheckCode::Detected("Connection failed while trying to rename the test file #{@payload_txt}.")

Avoid too many return statements within this method.

Open

      return CheckCode::Detected("Connection failed while trying to open test file #{@payload_txt} in the file editor")

Avoid too many return statements within this method.

Open

    return CheckCode::Vulnerable('Target is FlexDotnetCMS v1.5.8 or lower.')

Method cleanup has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.

Open

  def cleanup
    # only run when at least one attempt to upload a file has been made
    return if @skip_cleanup

    # delete uploaded TXT and ASP files

• Read up
  Read up