From 03ccb3cce07aca4acc6b911a281e0510d050411f Mon Sep 17 00:00:00 2001 From: jheysel-r7 Date: Tue, 5 Sep 2023 17:06:01 -0400 Subject: [PATCH] Apply grammatical suggestions from code review --- .../exploit/linux/http/solarview_unauth_rce_cve_2023_23333.md | 4 ++-- .../linux/http/solarview_unauth_rce_cve_2023_23333.rb | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/documentation/modules/exploit/linux/http/solarview_unauth_rce_cve_2023_23333.md b/documentation/modules/exploit/linux/http/solarview_unauth_rce_cve_2023_23333.md index 65817b7ff77c..f9d69d004438 100644 --- a/documentation/modules/exploit/linux/http/solarview_unauth_rce_cve_2023_23333.md +++ b/documentation/modules/exploit/linux/http/solarview_unauth_rce_cve_2023_23333.md @@ -9,7 +9,7 @@ For more information: Ideally, you would need an `SolarView Compact appliance` running embedded Linux on an ARM-32 bit architecture (armle). See [SolarView Compact appliance SVT-CPT-MC310](https://www.contec.com/products-services/environmental-monitoring/solarview/pv-package/sv-cpt-mc310/support/#section). However, by downloading the firmware and install the `html` and `php` part of the firmware on a Linux distribution -like Ubuntu or Kali linux, we can simulate the appliance and test the vulnerable endpoint. +like Ubuntu or Kali Linux, we can simulate the appliance and test the vulnerable endpoint. This module has been tested on: - [ ] Ubuntu Linux 22.04 @@ -157,7 +157,7 @@ Description: This module exploits a command injection vulnerability on the SolarView Compact `v6.00` web application via vulnerable endpoint `downloader.php`. After exploitation, an attacker will have full access with the same user privileges under - which the the webserver is running (typically as user `contec`). + which the webserver is running (typically as user `contec`). References: https://nvd.nist.gov/vuln/detail/CVE-2023-23333 diff --git a/modules/exploits/linux/http/solarview_unauth_rce_cve_2023_23333.rb b/modules/exploits/linux/http/solarview_unauth_rce_cve_2023_23333.rb index 7751f73b1c69..5bb7b5ec99d4 100644 --- a/modules/exploits/linux/http/solarview_unauth_rce_cve_2023_23333.rb +++ b/modules/exploits/linux/http/solarview_unauth_rce_cve_2023_23333.rb @@ -22,7 +22,7 @@ def initialize(info = {}) This module exploits a command injection vulnerability on the SolarView Compact `v6.00` web application via vulnerable endpoint `downloader.php`. After exploitation, an attacker will have full access with the same user privileges under - which the the webserver is running (typically as user `contec`). + which the webserver is running (typically as user `contec`). }, 'License' => MSF_LICENSE, 'Author' => [