This module is only meant to handle GET and PUT, so let's be strict on that

2012-02-17 18:17:28 -06:00 · 2012-02-17 18:17:28 -06:00 · 9e17b09632
parent 7ae58bfd9d
commit 9e17b09632
1 changed files with 2 additions and 2 deletions
--- a/modules/auxiliary/scanner/http/error_sql_injection.rb
+++ b/modules/auxiliary/scanner/http/error_sql_injection.rb
@ -36,9 +36,9 @@ class Metasploit3 < Msf::Auxiliary

 		register_options(
 			[
-				OptString.new('METHOD', [ true, "HTTP Method",'GET']),
+				OptEnum.new('METHOD', [true, 'HTTP Request Method', 'GET', ['GET', 'POST']]),
 				OptString.new('PATH', [ true,  "The path/file to test SQL injection", '/default.aspx']),
-				OptString.new('QUERY', [ false,  "HTTP URI Query", '']),
+				OptString.new('QUERY',[ false,  "HTTP URI Query", '']),
 				OptString.new('DATA', [ false,  "HTTP Body/Data Query", ''])
 			], self.class)