Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/windows/http/sonicwall_scrutinizer_sqli.rb

Summary

Maintainability
A
2 hrs
Test Coverage

Method initialize has 42 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info={})
    super(update_info(info,
      'Name'           => "Dell SonicWALL (Plixer) Scrutinizer 9 SQL Injection",
      'Description'    => %q{
          This module exploits a vulnerability found in Dell SonicWall Scrutinizer.
Severity: Minor
Found in modules/exploits/windows/http/sonicwall_scrutinizer_sqli.rb - About 1 hr to fix

    Method exploit has 26 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def exploit
    peer = "#{rhost}:#{rport}"
    p = "<?php #{payload.encoded} ?>"
    hex_payload = p.unpack("H*")[0]
    php_fname   = Rex::Text.rand_text_alpha(5) + ".php"
    Severity: Minor
    Found in modules/exploits/windows/http/sonicwall_scrutinizer_sqli.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status