diff --git a/modules/exploits/multi/http/cmsms_upload_rename_rce.rb b/modules/exploits/multi/http/cmsms_upload_rename_rce.rb index 120ba79e07..41bcb53b61 100644 --- a/modules/exploits/multi/http/cmsms_upload_rename_rce.rb +++ b/modules/exploits/multi/http/cmsms_upload_rename_rce.rb @@ -7,6 +7,7 @@ class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient + include Msf::Exploit::FileDropper def initialize(info = {}) super(update_info(info, @@ -163,6 +164,8 @@ class MetasploitModule < Msf::Exploit::Remote end vprint_good("#{peer} - File renamed #{filename}.php") + register_files_for_cleanup("#{filename}.txt", "#{filename}.php") + res = send_request_cgi({ 'uri' => normalize_uri(target_uri.path, 'uploads', "#{filename}.php"), 'method' => 'GET',