diff --git a/lib/common/models/wp_timthumb.rb b/lib/common/models/wp_timthumb.rb index dcaa12e1..8eb4d247 100755 --- a/lib/common/models/wp_timthumb.rb +++ b/lib/common/models/wp_timthumb.rb @@ -3,11 +3,13 @@ require 'wp_timthumb/versionable' require 'wp_timthumb/existable' require 'wp_timthumb/output' +require 'wp_timthumb/vulnerable' class WpTimthumb < WpItem include WpTimthumb::Versionable include WpTimthumb::Existable include WpTimthumb::Output + include WpTimthumb::Vulnerable # @param [ WpTimthumb ] other # diff --git a/lib/common/models/wp_timthumb/output.rb b/lib/common/models/wp_timthumb/output.rb index 4b523164..10e0a944 100644 --- a/lib/common/models/wp_timthumb/output.rb +++ b/lib/common/models/wp_timthumb/output.rb @@ -4,7 +4,7 @@ class WpTimthumb < WpItem module Output def output(verbose = false) - puts ' | ' + red('[!]') + " #{self}" + puts " | #{vulnerable? ? red('[!] Vulnerable') : green('[i] Not Vulnerable')} #{self}" end end diff --git a/lib/common/models/wp_timthumb/vulnerable.rb b/lib/common/models/wp_timthumb/vulnerable.rb new file mode 100644 index 00000000..18361639 --- /dev/null +++ b/lib/common/models/wp_timthumb/vulnerable.rb @@ -0,0 +1,9 @@ +# encoding: UTF-8 + +class WpTimthumb < WpItem + module Vulnerable + def vulnerable? + VersionCompare.is_newer_or_same?(version, '1.34') + end + end +end