diff --git a/lib/request/basic.py b/lib/request/basic.py index 1e00ec5f5..410aee760 100644 --- a/lib/request/basic.py +++ b/lib/request/basic.py @@ -75,7 +75,7 @@ def parseResponse(page, headers): # Detect injectable page absolute system path # NOTE: this regular expression works if the remote web application # is written in PHP and debug/error messages are enabled. - absFilePathsRegExp = ( r" in (?P.*?) on line", r"\b(?P[A-Za-z]:([\\/][\w.\\/]*)?)", r"(\A|[^<])(?P/[/\w.]+)" ) + absFilePathsRegExp = ( r" in (?P.*?) on line", r"(?:>|\s)(?P[A-Za-z]:[\\/][\w.\\/]*)", r"(?:>|\s)(?P/\w[/\w.]+)" ) for absFilePathRegExp in absFilePathsRegExp: reobj = re.compile(absFilePathRegExp)