diff --git a/modules/exploits/multi/http/cmsms_upload_rename_rce.rb b/modules/exploits/multi/http/cmsms_upload_rename_rce.rb index b303668e3f..41bcb53b61 100644 --- a/modules/exploits/multi/http/cmsms_upload_rename_rce.rb +++ b/modules/exploits/multi/http/cmsms_upload_rename_rce.rb @@ -164,8 +164,7 @@ class MetasploitModule < Msf::Exploit::Remote end vprint_good("#{peer} - File renamed #{filename}.php") - register_files_for_cleanup("#{filename}.txt") - register_files_for_cleanup("#{filename}.php") + register_files_for_cleanup("#{filename}.txt", "#{filename}.php") res = send_request_cgi({ 'uri' => normalize_uri(target_uri.path, 'uploads', "#{filename}.php"),