Skip to content

Commit

Permalink
Fix bug
Browse files Browse the repository at this point in the history
  • Loading branch information
Chocapikk committed Sep 8, 2024
1 parent c75ffb4 commit 4f859f1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion modules/exploits/multi/http/spip_bigup_unauth_rce.rb
Original file line number Diff line number Diff line change
Expand Up @@ -102,13 +102,13 @@ def check

print_good("SPIP version #{rversion} is vulnerable.")
plugin_version = spip_plugin_version('bigup')
print_status("Bigup plugin version detected: #{plugin_version}")

unless plugin_version
print_warning('Could not determine the version of the bigup plugin.')
return CheckCode::Appears("The detected SPIP version (#{rversion}) is vulnerable.")
end

print_status("Bigup plugin version detected: #{plugin_version}")
if plugin_version < Rex::Version.new('3.2.12')
return CheckCode::Appears("Both the detected SPIP version (#{rversion}) and bigup version (#{plugin_version}) are vulnerable.")
end
Expand Down

0 comments on commit 4f859f1

Please sign in to comment.