PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00
Code Issues Projects Releases Wiki Activity

Fix format string argument mismatches

Browse Source 
Cases where the format string does not contain any placeholders, but
values are given anyway. Cases where string.format is used without any
placeholders or arguments.
This commit is contained in:
dmiller
2015-09-18 12:40:32 +00:00
parent a954950b5a
commit 9840973b60
17 changed files with 25 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
scripts/http-vuln-cve2011-3368.nse
View File

@@ -152,7 +152,7 @@ servers to remote users who send carefully crafted requests.]],
end
-- TEST 3: The external website test. This does not mean that you can reach a LAN ip, but this is a relevant issue anyway.
local external = http.get(host,port, ("@scanme.nmap.org"):format(prefix))
local external = http.get(host,port, ("%s@scanme.nmap.org"):format(prefix))
if ( external.status == 200 and string.match(external.body,"Go ahead and ScanMe") ) then
vuln.extra_info = "Proxy allows requests to external websites"
end