Skip to content

Commit

Permalink
Update modules/exploits/multi/http/wp_time_capsule_file_upload_rce.rb
Browse files Browse the repository at this point in the history
Co-authored-by: Julien Voisin <[email protected]>
  • Loading branch information
Chocapikk and jvoisin authored Dec 12, 2024
1 parent 7b918b2 commit 9c8db05
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ def initialize(info = {})
code execution (RCE).
The validation logic in the vulnerable function improperly checks for allowed extensions.
If no valid extension is found, the check can be bypassed by using a filename of specific lengths
If no valid extension is found, the check can be bypassed by using a filename of specific length
(e.g., "00.php") matching the length of allowed extensions like ".crypt".
},
'Author' => [
Expand Down

0 comments on commit 9c8db05

Please sign in to comment.