[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openvas-cvs
Subject:    [Openvas-commits] r3204 - in trunk/openvas-plugins: . scripts
From:       scm-commit () wald ! intevation ! org
Date:       2009-04-27 19:08:47
Message-ID: 20090427190847.7900440870 () pyrosoma ! intevation ! org
[Download RAW message or body]

Author: edjenguele
Date: 2009-04-27 21:08:45 +0200 (Mon, 27 Apr 2009)
New Revision: 3204

Modified:
   trunk/openvas-plugins/ChangeLog
   trunk/openvas-plugins/scripts/remote-ApacheOfbiz-defaultPwd.nasl
   trunk/openvas-plugins/scripts/remote-Opentaps-defaultPwd.nasl
Log:
Fix possible buggus module url, add a '/' prefrix to get the correct
Referer header, this can cause some errors on some circumtances.


Modified: trunk/openvas-plugins/ChangeLog
===================================================================
--- trunk/openvas-plugins/ChangeLog	2009-04-27 13:24:41 UTC (rev 3203)
+++ trunk/openvas-plugins/ChangeLog	2009-04-27 19:08:45 UTC (rev 3204)
@@ -1,5 +1,11 @@
-2009-04-23  Michael Wiegand <michael.wiegand@intevation.de>
+2009-04-27 Christian Eric Edjenguele <christian.edjenguele@owasp.org>
+	* scripts/remote-Opentaps-defaultPwd.nasl,
+	* scripts/remote-ApacheOfbiz-defaultPwd.nasl:
+	Fix possible buggus module url, add a '/' prefrix to get the correct
+	Referer header
 
+2009-04-27  Michael Wiegand <michael.wiegand@intevation.de>
+
 	* scripts/remote-Opentaps-htmlIjection.nasl: Fixed duplicate ID.
 
 2009-04-26 Michael Meyer <mime@gmx.de>

Modified: trunk/openvas-plugins/scripts/remote-ApacheOfbiz-defaultPwd.nasl
===================================================================
--- trunk/openvas-plugins/scripts/remote-ApacheOfbiz-defaultPwd.nasl	2009-04-27 13:24:41 UTC (rev 3203)
+++ trunk/openvas-plugins/scripts/remote-ApacheOfbiz-defaultPwd.nasl	2009-04-27 19:08:45 UTC (rev 3204)
@@ -76,14 +76,14 @@
 
 
 port = get_kb_item("ApacheOFBiz/port");
-module = 'webtools/control/login';
+module = '/webtools/control/login';
 report = '';
 host = get_host_name();
 postdata = string("USERNAME=admin&PASSWORD=ofbiz");
 
 if(!port){
 	port = 8443;
-	request = string("POST /", module, " HTTP/1.1\r\n",
+	request = string("POST ", module, " HTTP/1.1\r\n",
 			 "Content-Type: application/x-www-form-urlencoded\r\n", 
         		 "Content-Length: ", strlen(postdata),"\r\n",
 			 "Referer: http://", host, ":", port, module, "\r\n",

Modified: trunk/openvas-plugins/scripts/remote-Opentaps-defaultPwd.nasl
===================================================================
--- trunk/openvas-plugins/scripts/remote-Opentaps-defaultPwd.nasl	2009-04-27 13:24:41 UTC (rev 3203)
+++ trunk/openvas-plugins/scripts/remote-Opentaps-defaultPwd.nasl	2009-04-27 19:08:45 UTC (rev 3204)
@@ -78,14 +78,14 @@
 
 
 port = get_kb_item("OpentapsERP/port");
-module = 'webtools/control/login';
+module = '/webtools/control/login';
 report = '';
 host = get_host_name();
 postdata = string("USERNAME=admin&PASSWORD=ofbiz");
 
 if(!port){
 	port = 8080;
-	request = string("POST /", module, " HTTP/1.1\r\n",
+	request = string("POST ", module, " HTTP/1.1\r\n",
 			 "Content-Type: application/x-www-form-urlencoded\r\n", 
         		 "Content-Length: ", strlen(postdata), "\r\n",
  			 "Referer: http://", host, ":", port, module, "\r\n",

_______________________________________________
Openvas-commits mailing list
Openvas-commits@wald.intevation.org
http://lists.wald.intevation.org/mailman/listinfo/openvas-commits
[prev in list] [next in list] [prev in thread] [next in thread]