diff --git a/modules/exploits/multi/http/spip_rce_form.rb b/modules/exploits/multi/http/spip_rce_form.rb index 2b06b4191543..add2248e056b 100644 --- a/modules/exploits/multi/http/spip_rce_form.rb +++ b/modules/exploits/multi/http/spip_rce_form.rb @@ -80,11 +80,13 @@ def check print_status("SPIP Version detected: #{rversion}") - if rversion.between?(Rex::Version.new('2.0.0'), Rex::Version.new('2.0.20')) + if rversion.between?(Rex::Version.new('4.2.0'), Rex::Version.new('4.2.1')) return Exploit::CheckCode::Appears - elsif rversion.between?(Rex::Version.new('2.1.0'), Rex::Version.new('2.1.15')) + elsif rversion.between?(Rex::Version.new('4.1.0'), Rex::Version.new('4.1.18')) return Exploit::CheckCode::Appears - elsif rversion.between?(Rex::Version.new('3.0.0'), Rex::Version.new('3.0.2')) + elsif rversion.between?(Rex::Version.new('4.0.0'), Rex::Version.new('4.0.10')) + return Exploit::CheckCode::Appears + elsif rversion.between?(Rex::Version.new('3.2.0'), Rex::Version.new('3.2.18')) return Exploit::CheckCode::Appears end